a981d1df382922d8704490e05d9c751a9d4b72d16a193627be32901a2566bca7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a981d1df382922d8704490e05d9c751a9d4b72d16a193627be32901a2566bca7
Size

3.3MB
MD5

11d61b0311539c4abfd7c1035c0a87d3
SHA1

bf80ba19a52f4ee6800776605095dd5bbf0e9d8c
SHA256

a981d1df382922d8704490e05d9c751a9d4b72d16a193627be32901a2566bca7
SHA512

0458a17d7d8a4ca6948ce3959acb6c304dabde7e963cf798d97345edce68422f269cca226ff9466fe10fda90111ac1be399ef64c625a36c7c378c06988763ab4
SSDEEP

49152:VzIpg+J50rj+xOsTwkVa/InRlzPbYL4hH9eqYc1l0tY/2OClsdXr7AUF5I7hrxj:yg+J++xOsEkVFzYkhdOcrcufR/H5wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a981d1df382922d8704490e05d9c751a9d4b72d16a193627be32901a2566bca7

Files

a981d1df382922d8704490e05d9c751a9d4b72d16a193627be32901a2566bca7
.exe windows:4 windows x86 arch:x86

25835990b7a69cfe918b6bf32ae04da5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

AlphaBlend

gdi32

WidenPath

version

VerQueryValueA

mpr

WNetGetConnectionA

olepro32

OleLoadPicture

ole32

CreateStreamOnHGlobal

comctl32

FlatSB_SetScrollPos

imm32

ImmGetCompositionStringW

shell32

ShellExecuteA

winspool.drv

WritePrinter

comdlg32

PrintDlgA

wsock32

WSACleanup

netapi32

Netbios

gdiplus

GdipGetImageHeight

winmm

timeGetTime

Sections

.text
Size: 3.2MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE