e7678338ba613ce1d3ed9bcfbbbd3b7a052f4dd52ae07b2103dad924f1236eaa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7678338ba613ce1d3ed9bcfbbbd3b7a052f4dd52ae07b2103dad924f1236eaa
Size

3.1MB
MD5

4af918a160b35b3bcd9adc7d408eac4b
SHA1

6a491e0e9137771c9f187f4b9a807eb9dc48e98a
SHA256

e7678338ba613ce1d3ed9bcfbbbd3b7a052f4dd52ae07b2103dad924f1236eaa
SHA512

381598308846ba01670d403a1cb2d2dd49fb4f339fcbb242cf452d92d5cbec681a5eab5a9c5a6cb00129302c6176461ec6c4a3b9941e4a283b44d90a2344bc88
SSDEEP

98304:4kSCjzcwignvyXuK5D+JYP2cP34ghYIUPd:9HckvyeK59//YIUPd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7678338ba613ce1d3ed9bcfbbbd3b7a052f4dd52ae07b2103dad924f1236eaa

Files

e7678338ba613ce1d3ed9bcfbbbd3b7a052f4dd52ae07b2103dad924f1236eaa
.exe windows:4 windows x86 arch:x86

fcd5c62a3890d2a2f5c159ce8653b95b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError

user32

WaitForInputIdle

gdi32

SelectPalette

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Create

ws2_32

closesocket

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.6MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ