5cfa9387bd3b8ea24a9449f93b9195edf5247793a87ee3a4cfa97037178845e6

Sharing

Copy URL Twitter E-mail

General

Target

5cfa9387bd3b8ea24a9449f93b9195edf5247793a87ee3a4cfa97037178845e6
Size

13.4MB
MD5

e9b7fccdb8a679d5f273291d112d040a
SHA1

9f44f16e9208109a632a1777df06ece7f4a2faf1
SHA256

5cfa9387bd3b8ea24a9449f93b9195edf5247793a87ee3a4cfa97037178845e6
SHA512

4211006425320217dd4736b754561ba734076b7b73a72df522380d816ba32211bc5dd96eec69aa97c37e0b4fb4c3829ad8de9f33d5afc66ec390107393e4845e
SSDEEP

196608:AjSZYEREDwsoP4hqvXKIqWugv5ADKpdqC7MRPOZA6q+XDjqU/i4/59sJ09czjc8:A2ZBREcs+4hqiI1Gen57MN8+o9Vc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cfa9387bd3b8ea24a9449f93b9195edf5247793a87ee3a4cfa97037178845e6

Files

5cfa9387bd3b8ea24a9449f93b9195edf5247793a87ee3a4cfa97037178845e6
.exe windows x86

52c17c6b7b8db4864d629726d6c595b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile

user32

RegisterClassA

gdi32

SelectClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

Sections

.text
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 432KB - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

52c17c6b7b8db4864d629726d6c595b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 556KB

.rdata Size: - Virtual size: 1.5MB

.data Size: - Virtual size: 171KB

.rsrc Size: 24KB - Virtual size: 20KB

.svmp1 Size: - Virtual size: 3.7MB

.svmp2 Size: 4.4MB - Virtual size: 4.4MB

.svmp3 Size: 2.6MB - Virtual size: 2.6MB

.svmp4 Size: 5.9MB - Virtual size: 5.9MB

.svmp5 Size: 12KB - Virtual size: 11KB

.svmp6 Size: 432KB - Virtual size: 428KB

.text
Size: - Virtual size: 556KB

.rdata
Size: - Virtual size: 1.5MB

.data
Size: - Virtual size: 171KB

.rsrc
Size: 24KB - Virtual size: 20KB

.svmp1
Size: - Virtual size: 3.7MB

.svmp2
Size: 4.4MB - Virtual size: 4.4MB

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

.svmp4
Size: 5.9MB - Virtual size: 5.9MB

.svmp5
Size: 12KB - Virtual size: 11KB

.svmp6
Size: 432KB - Virtual size: 428KB