df99bb2a98816c7f85ca511b6bc85b2e7d06006bf0d88680bfe5aa05080e4466N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df99bb2a98816c7f85ca511b6bc85b2e7d06006bf0d88680bfe5aa05080e4466N
Size

1.3MB
MD5

ddc46cde428f7131123a52e281d04630
SHA1

f9d8b9fe28d69efc9995b053514549b35825e668
SHA256

df99bb2a98816c7f85ca511b6bc85b2e7d06006bf0d88680bfe5aa05080e4466
SHA512

f05baa51a616e4b0b6652750db4fa35877312edbd82aa09290e8ec222503100c39b4f0680eb674584a0242fcef168fab1c30d0724098d4996dd2e86daa70da3e
SSDEEP

24576:oHNQqKwXWH7YOt1fg8PW2fmVIhP5JY7iI59AbA0/mseJE8DuhQIs3D7ETRq:oyqtGD1fRhfmCnCd0f/reK8DuuFz7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df99bb2a98816c7f85ca511b6bc85b2e7d06006bf0d88680bfe5aa05080e4466N

Files

df99bb2a98816c7f85ca511b6bc85b2e7d06006bf0d88680bfe5aa05080e4466N
.exe windows:4 windows x86 arch:x86

0bc96b00fcbaff967e6e9e74ebb3a9c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

BeginPaint

gdi32

BitBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathIsUNCA

oleaut32

VariantInit

ws2_32

getservbyname

Sections

.text
Size: 1.3MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE