c13bdfc9eea67fe855c4f53cb03f7fabae30f3bfb7e2c29c284d93453e851aa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c13bdfc9eea67fe855c4f53cb03f7fabae30f3bfb7e2c29c284d93453e851aa6
Size

4.7MB
MD5

3a8d170a7ae0bd19ec2d3f0c66d0b78d
SHA1

b9ad2b29ab6a1495e8190c8914f3812651dbf50a
SHA256

c13bdfc9eea67fe855c4f53cb03f7fabae30f3bfb7e2c29c284d93453e851aa6
SHA512

52f94d78db29b8c9a7cfd9685f7764b458354cae10c2ba5f3d62b194d0e66675555432f5b637f4254faf58669ba527b1b62670b340401d7035f7568475973bb9
SSDEEP

98304:AbxIKelnLY65jjlO5+u0w4bbaCTg57tprVJ0e7LSmOvrTpYd:iIKinE6BjlOSb3e7tpfx7LSZvrT2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13bdfc9eea67fe855c4f53cb03f7fabae30f3bfb7e2c29c284d93453e851aa6

Files

c13bdfc9eea67fe855c4f53cb03f7fabae30f3bfb7e2c29c284d93453e851aa6
.exe windows:4 windows x86 arch:x86

7954f41b9e89687b52bff03e7fadd360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

htonl

user32

GetMessagePos

gdi32

TextOutA

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: 4.6MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE