ca814fa31bb481b6853dbc27028c2942edccf0a9ac08e842b349c2d2596fb084

Sharing

Copy URL Twitter E-mail

General

Target

ca814fa31bb481b6853dbc27028c2942edccf0a9ac08e842b349c2d2596fb084
Size

3.0MB
MD5

133410856f873edf0c12b72d90eb5e2f
SHA1

1c09110ec46733c9c3af00fe8e268a730e29cc2c
SHA256

ca814fa31bb481b6853dbc27028c2942edccf0a9ac08e842b349c2d2596fb084
SHA512

9dee1a34836df59c104bba0a2e17a86bf7e68cf069d7d7311129d6c3162ef7ca630cf221f12c14f122943ce30498bd9b724bb693fe73b51c4511f9783c78a7c5
SSDEEP

49152:2vYjpCOCQdLzdHxI5ByzNaHjHrG3Namlhu24rQX9xe:3VCOCgXdS4zuYTh8uP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca814fa31bb481b6853dbc27028c2942edccf0a9ac08e842b349c2d2596fb084

Files

ca814fa31bb481b6853dbc27028c2942edccf0a9ac08e842b349c2d2596fb084
.dll windows x86

1ced491263dba7e7385b153924330e46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutPrepareHeader

ws2_32

closesocket

rasapi32

RasGetConnectStatusA

kernel32

GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetScrollPos

gdi32

ExcludeClipRect

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

RegisterTypeLi

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

comdlg32

GetSaveFileNameA

Exports

Exports

CInit
CUnInit

Sections

.text
Size: 788KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ced491263dba7e7385b153924330e46

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Exports

Exports

Sections

.text Size: 788KB - Virtual size: 785KB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 140KB - Virtual size: 402KB

.text0 Size: 308KB - Virtual size: 306KB

.text1 Size: 116KB - Virtual size: 114KB

.reloc Size: 48KB - Virtual size: 47KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 788KB - Virtual size: 785KB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 140KB - Virtual size: 402KB

.text0
Size: 308KB - Virtual size: 306KB

.text1
Size: 116KB - Virtual size: 114KB

.reloc
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 16KB - Virtual size: 14KB