7f854f50fd754e4f4e2ef1200997b6d409030e8f66d3676f616451ad5979d890

Sharing

Copy URL Twitter E-mail

General

Target

7f854f50fd754e4f4e2ef1200997b6d409030e8f66d3676f616451ad5979d890
Size

4.1MB
MD5

8961de54bbfc12eb85e417f472cda24e
SHA1

22446051b30c8fe8e832ff3a093bae57838bee00
SHA256

7f854f50fd754e4f4e2ef1200997b6d409030e8f66d3676f616451ad5979d890
SHA512

1074577946d42a1263b22bf0a689bbcd89994c72fc41a60985a1ceefcd607db7eae3fa290cb94fa0f1162b8bfb207ebd4c1fd85113d7f90683e57b7373af6c02
SSDEEP

49152:i5+W1TdEsozalvN2Cn0S/iCFVLIiSQinv0SkjSoIp8hksrq57eF25yzEY4rXxojm:g1x9D2uf9IiYv0SkjleBTCUyz0Xx4c3d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f854f50fd754e4f4e2ef1200997b6d409030e8f66d3676f616451ad5979d890

Files

7f854f50fd754e4f4e2ef1200997b6d409030e8f66d3676f616451ad5979d890
.exe windows x86

1f1ef6aed722994e15a3f1adbbe96698

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasDialA

winmm

midiOutPrepareHeader

ws2_32

inet_ntoa

kernel32

SetFilePointer

user32

ScrollWindowEx

gdi32

CreateFontIndirectA

msimg32

GradientFill

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetDim

comctl32

ImageList_Create

wininet

InternetCloseHandle

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.0MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f1ef6aed722994e15a3f1adbbe96698

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

msvcrt

iphlpapi

psapi

Sections

.text Size: 2.0MB - Virtual size: 3.7MB

.sedata Size: 2.0MB - Virtual size: 2.0MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 2.0MB - Virtual size: 3.7MB

.sedata
Size: 2.0MB - Virtual size: 2.0MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB