eb8569489445991b2666bbdfbab65c8b40dc47f57825c1aa34c11f93c421e4e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb8569489445991b2666bbdfbab65c8b40dc47f57825c1aa34c11f93c421e4e6
Size

1.2MB
MD5

10541a24a8d5c38e163f067f5c8af524
SHA1

5622767e0d95d7afd41ac74c4cd5ba241035cd81
SHA256

eb8569489445991b2666bbdfbab65c8b40dc47f57825c1aa34c11f93c421e4e6
SHA512

f192c40f51756b73adc8bc5f047318e9b8fbc956a86be9660b54fce7e2ef716d885ba8b759fd1eeb034f7d533090bba944500665d7b1268fd91fae6e7fff3428
SSDEEP

24576:AlSUiZoVmTNMKrEMrmw//3uGhOmbGIKFB8EENJnhrcvJ1a7rVS3+Yg7jvzEU:AlSUimMTNMKr7B//rFKsdRc/Yx4TOvz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb8569489445991b2666bbdfbab65c8b40dc47f57825c1aa34c11f93c421e4e6

Files

eb8569489445991b2666bbdfbab65c8b40dc47f57825c1aa34c11f93c421e4e6
.exe windows:4 windows x86 arch:x86

90fcbe7201e8b8055fe574c8cb5c796b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

oleaut32

SysFreeString

advapi32

RegEnumValueA

version

VerQueryValueA

gdi32

UpdateColors

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA

shell32

DragQueryPoint

winmm

timeGetTime

wsock32

getservbyname

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1.1MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE