79d2116bf432d160cfddc156a7b1b249642aac869fbbf615905b455b7dc3f388 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79d2116bf432d160cfddc156a7b1b249642aac869fbbf615905b455b7dc3f388
Size

2.6MB
MD5

2efbd8b525a17e6e4e396edaea5a5cc8
SHA1

73521202453ed328bd546371ffb6a842fa433b0f
SHA256

79d2116bf432d160cfddc156a7b1b249642aac869fbbf615905b455b7dc3f388
SHA512

b22c2b7cd8565eab2e023a3781db0400e14ef2730bd7b259b72fc3077565e6daec6e2a53fb35a2d0ff3cdfcff111900fd53e139b00d2c5f4ef767d0bde04535f
SSDEEP

49152:GH2rhaZ8IkY//6HAhWvnOYbl1+OnEq40Kp1gNWTvlnN8xZbxYSU:GH2rhYnvmnxB1Bc0rkNNMVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79d2116bf432d160cfddc156a7b1b249642aac869fbbf615905b455b7dc3f388

Files

79d2116bf432d160cfddc156a7b1b249642aac869fbbf615905b455b7dc3f388
.exe windows:4 windows x86 arch:x86

b679d7f5a61747c8780d6c79a8659412

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

WidenPath

version

VerQueryValueA

mpr

WNetGetConnectionA

olepro32

OleLoadPicture

ole32

CreateStreamOnHGlobal

comctl32

FlatSB_SetScrollPos

imm32

ImmGetCompositionStringW

shell32

ShellExecuteA

winspool.drv

WritePrinter

comdlg32

PrintDlgA

netapi32

Netbios

wsock32

WSACleanup

gdiplus

GdipGetImageHeight

winmm

timeGetTime

Sections

.text
Size: 2.4MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE