677fd64cc0682221ea611f07aa99a665c3f29525cad02e5b8d93e845646e9281 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

677fd64cc0682221ea611f07aa99a665c3f29525cad02e5b8d93e845646e9281
Size

1.1MB
MD5

f0db504a6b173e2bc510e64db111ef50
SHA1

7deb21ff35b76a5638b57e734d46701659d9a48b
SHA256

677fd64cc0682221ea611f07aa99a665c3f29525cad02e5b8d93e845646e9281
SHA512

7bb35f3e449138029eebfe28a10a98bddf8c29abcd4f9ee4486eed507931bcc39bde4dd665abb07e6c83bfb54b4a919284796c0ea9bf1467703305ae836d296f
SSDEEP

24576:1K+EUSKnebPacYEpe6aO2rdL+EAlCHgl/xX2KGxWSg+RFcNnmV:1nxebPpGJL+EDHgpxmK2g+nD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
677fd64cc0682221ea611f07aa99a665c3f29525cad02e5b8d93e845646e9281

Files

677fd64cc0682221ea611f07aa99a665c3f29525cad02e5b8d93e845646e9281
.exe windows:4 windows x86 arch:x86

4ce75421c49cb5bddb12e392cb9d139d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

oleaut32

SysFreeString

advapi32

RegEnumValueA

version

VerQueryValueA

gdi32

UpdateColors

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA

shell32

DragQueryPoint

wsock32

getservbyname

winmm

sndPlaySoundA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 1.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE