1c492d6f9f0f74c69ea4b1819e7f54da7f816c5228298616739e90c778c4bc61

Sharing

Copy URL Twitter E-mail

General

Target

1c492d6f9f0f74c69ea4b1819e7f54da7f816c5228298616739e90c778c4bc61
Size

14.0MB
MD5

f8f1ca3fedd2fa24a50be304f5e41bf9
SHA1

b4526cc6cd24ca9cc0cd96dd50c4a9e32e5a9515
SHA256

1c492d6f9f0f74c69ea4b1819e7f54da7f816c5228298616739e90c778c4bc61
SHA512

517ffd1e1b09fe7f3d2c3c2e71119b7e831de25be990f955559ef5d8da64ebd6f2d4b452f2d84a0cebdd5c9fe8afd67fb15542c4f916efb113bcaadbb8362fa9
SSDEEP

196608:riE7IXaRMswaRKa4w+xRjDXyL2VxFfmUO/Tq6Z3DwH7tc/bbwpvwD/msIZkwoe3M:mE7Rvwat4DiSs/wRdZItWHQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c492d6f9f0f74c69ea4b1819e7f54da7f816c5228298616739e90c778c4bc61

Files

1c492d6f9f0f74c69ea4b1819e7f54da7f816c5228298616739e90c778c4bc61
.exe windows x86

2df154c86873371d4376e2295620e0db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DestroyAcceleratorTable
CharUpperBuffW

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Ifg
Size: - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.inU
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3 -
Size: 14.0MB - Virtual size: 14.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2df154c86873371d4376e2295620e0db

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 856KB

.rdata Size: - Virtual size: 2.5MB

.data Size: - Virtual size: 329KB

.Ifg Size: - Virtual size: 8.9MB

.inU Size: 4KB - Virtual size: 2KB

.3 - Size: 14.0MB - Virtual size: 14.0MB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: - Virtual size: 856KB

.rdata
Size: - Virtual size: 2.5MB

.data
Size: - Virtual size: 329KB

.Ifg
Size: - Virtual size: 8.9MB

.inU
Size: 4KB - Virtual size: 2KB

.3 -
Size: 14.0MB - Virtual size: 14.0MB

.rsrc
Size: 12KB - Virtual size: 10KB