b4370fcd3a06193569608b6c1a283a62901f8f0ce9eb253d73308cc4bf6fe7e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4370fcd3a06193569608b6c1a283a62901f8f0ce9eb253d73308cc4bf6fe7e1
Size

1.6MB
MD5

1d0b33fb2a50607fbdf13bb7086a3501
SHA1

33724e022da7f8660499e124cf4dfd4ccb699660
SHA256

b4370fcd3a06193569608b6c1a283a62901f8f0ce9eb253d73308cc4bf6fe7e1
SHA512

a23b9fc583fa91fce3055a4d6e2edb26941db931918e68fcce381e1590e68240526d18938fe999404346f58409ca660717777b9a3b20dabd1cf2b4b8db8e2063
SSDEEP

24576:Swaxbwd9MLeIa41xxxYrMpS4yBbPrsn2L0psHYcZxNzMTDzcPqCN70VvzXde:SwGwd0fa41JY4yFzsn2IpQbbw7cDVWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4370fcd3a06193569608b6c1a283a62901f8f0ce9eb253d73308cc4bf6fe7e1

Files

b4370fcd3a06193569608b6c1a283a62901f8f0ce9eb253d73308cc4bf6fe7e1
.exe windows:6 windows x86 arch:x86

d5785b08bc7e1e7b2d5286cbc973aebe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

sndPlaySoundW

oleacc

LresultFromObject

shlwapi

PathIsRelativeW

winspool.drv

DocumentPropertiesW

comdlg32

FindTextW

comctl32

FlatSB_SetScrollInfo

shell32

DragFinish

user32

CopyImage

version

GetFileVersionInfoSizeW

oleaut32

GetErrorInfo

advapi32

RegSetValueExW

msvcrt

memcpy

ole32

RevokeDragDrop

gdi32

Pie

Sections

.text
Size: 1.5MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE