544e4c69ba2c18e28d1e487471154a83a5456ee70917ef69526f2e4e7ca6fc02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

544e4c69ba2c18e28d1e487471154a83a5456ee70917ef69526f2e4e7ca6fc02
Size

7.1MB
MD5

1dd7a7c806dbcf2cd04268c6df2c4e88
SHA1

47993d206cabc26a076f4aea0eb04a7e8316227d
SHA256

544e4c69ba2c18e28d1e487471154a83a5456ee70917ef69526f2e4e7ca6fc02
SHA512

2328a41259ec8295f07233556e4534d8a2bc306a29594019847eb2981c1282673ab91b6422bb16f11fa2386e11db7f9270bb3dfdc4d59a5712e005852861f1e1
SSDEEP

196608:maq6OxJ/PJupxu+UhYI8Zdst5OvO8i3VXQgQDL:maq6aJXJup8+BeVmvL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
544e4c69ba2c18e28d1e487471154a83a5456ee70917ef69526f2e4e7ca6fc02

Files

544e4c69ba2c18e28d1e487471154a83a5456ee70917ef69526f2e4e7ca6fc02
.exe windows:4 windows x86 arch:x86

c09ccbcc65a9efeb1a869e73758c7a3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSACleanup

user32

DestroyAcceleratorTable

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: 7.1MB - Virtual size: 21.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE