98146d87bf310e2bede0d007a8f40c079dcaa07e1796c085cb1e5c383e05c20f

Sharing

Copy URL Twitter E-mail

General

Target

98146d87bf310e2bede0d007a8f40c079dcaa07e1796c085cb1e5c383e05c20f
Size

12.1MB
MD5

4856dd58b0c1bf7b7679858bbba8ddbc
SHA1

e6ee80099b403be4e26218e8ceae6b8306b3519d
SHA256

98146d87bf310e2bede0d007a8f40c079dcaa07e1796c085cb1e5c383e05c20f
SHA512

3490ed8dfbaf904529758794e278180e97179605d2cbee2791ad6710fcd1da0fc58c48fa1d08a42f6de207266d424d1a976e5e0f93a1841f017e64eb95d022f5
SSDEEP

196608:gotZgs21BRLdoQlSOLM8gYQg/yhcbufTDgF:gotZoBRC0tL9gYQg/vbub8F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98146d87bf310e2bede0d007a8f40c079dcaa07e1796c085cb1e5c383e05c20f

Files

98146d87bf310e2bede0d007a8f40c079dcaa07e1796c085cb1e5c383e05c20f
.exe windows x86

71154cd519188089c4f7787502377aa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shlwapi

PathFindFileNameA

ws2_32

closesocket

wininet

InternetSetCookieA

winhttp

WinHttpCheckPlatform

oledlg

ord8

icmp

IcmpCreateFile

winspool.drv

OpenPrinterA

Sections

.text
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71154cd519188089c4f7787502377aa4

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

user32

gdi32

version

mpr

ole32

comctl32

shell32

comdlg32

wsock32

gdiplus

msvcrt

iphlpapi

psapi

shlwapi

ws2_32

wininet

winhttp

oledlg

icmp

winspool.drv

Sections

.text Size: 9.7MB - Virtual size: 9.7MB

.hero Size: 1.8MB - Virtual size: 1.8MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.hero Size: 4KB - Virtual size: 4KB

.text
Size: 9.7MB - Virtual size: 9.7MB

.hero
Size: 1.8MB - Virtual size: 1.8MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.hero
Size: 4KB - Virtual size: 4KB