ed5df80fbd549e8bfbcef8523b87da05f7d08b73fc447c955beac85889c51ea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed5df80fbd549e8bfbcef8523b87da05f7d08b73fc447c955beac85889c51ea2
Size

2.2MB
MD5

c4c18f2e5229f392ceef86015039136e
SHA1

f61b202fa11968e70f26c47d1cd69f8929b7ba97
SHA256

ed5df80fbd549e8bfbcef8523b87da05f7d08b73fc447c955beac85889c51ea2
SHA512

160e820a3b22d8ce00de5bd65ba259f39c88b78e830400ddb555ef1c3af810496ccd221552e0f9baf08c63c89204e4b64cfc15fe126e2e895f03ec666bb0ab38
SSDEEP

49152:GTLsN7FdmJQgy8a3Gkd4sNq/8OHuKOaE+yuZr:msNxd58a270OHuRaE+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed5df80fbd549e8bfbcef8523b87da05f7d08b73fc447c955beac85889c51ea2

Files

ed5df80fbd549e8bfbcef8523b87da05f7d08b73fc447c955beac85889c51ea2
.exe windows:4 windows x86 arch:x86

02f34fe4eea4bf692b27dcfce477a4ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

recvfrom

kernel32

CreateSemaphoreA

user32

GetSystemMenu

gdi32

GetViewportExtEx

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 812KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ