994e77b219a90914de5b84b4b11844a0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

994e77b219a90914de5b84b4b11844a0N
Size

3.1MB
MD5

994e77b219a90914de5b84b4b11844a0
SHA1

0f9078ca71d1e4ce05fbaa89758f5a49ede51f02
SHA256

5068a3d83724aeb7451c7a94f8a34175be2f3db83982d95cb508bb8a8f0e214e
SHA512

ebf974aa56a66615ea4bea8c91970c06461d01da558352deb89dddaecd5675add058310d783f090b6b663121d799eb7ab5738e73ea01e1dd9cc13c0eff05c275
SSDEEP

49152:ZFbXiB1kfM8t7yI3Vmh5euugtZdKRuT/OQ5iE/gv3vOd6jpWDtGM7nzV9m9BFon:ZpSB6fD4h0UKRuT/OSiE/43W2WD/nSon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
994e77b219a90914de5b84b4b11844a0N

Files

994e77b219a90914de5b84b4b11844a0N
.exe windows:4 windows x86 arch:x86

fcd5c62a3890d2a2f5c159ce8653b95b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError

user32

WaitForInputIdle

gdi32

SelectPalette

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Create

ws2_32

closesocket

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.6MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ