4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab

Sharing

Copy URL

Twitter E-mail

General

Target

4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab
Size

13.0MB
MD5

f52e5f383eb223daced7a08b5445e427
SHA1

6e317633fa594a898a7783d24bac9cdd02d4a95c
SHA256

4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab
SHA512

a57d627866cfb4479519a0bd633bb1092ec175df7268cb3d17ebccb1a68185cd02efb7ca3600b9b0e339384409297b93a8a58a3cd441d8365488c1b9c6623351
SSDEEP

196608:EPCiohGV4fAHhzEU1hh7KpdqC7MRPOZjsrS1EyBulVdSCQKxqEXVj96ah00iM0gP:CBohC4ezEChh2n57MTj++/D67MLW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab

Files

4d340bfdd7a0ed924ef193334c3f8550259a5c725f67430c80113fa46983bfab
.exe windows x86

0eb7d91e54faf3ede6deae2acb105fec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

GetSystemDirectoryA

user32

GetMenu

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 530KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0eb7d91e54faf3ede6deae2acb105fec

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 520KB

.rdata Size: - Virtual size: 530KB

.data Size: - Virtual size: 208KB

.rsrc Size: 24KB - Virtual size: 22KB

.svmp1 Size: - Virtual size: 3.8MB

.svmp2 Size: 3.8MB - Virtual size: 3.8MB

.svmp3 Size: 2.6MB - Virtual size: 2.6MB

.svmp4 Size: 6.2MB - Virtual size: 6.2MB

.svmp5 Size: 12KB - Virtual size: 11KB

.svmp6 Size: 376KB - Virtual size: 375KB

.text
Size: - Virtual size: 520KB

.rdata
Size: - Virtual size: 530KB

.data
Size: - Virtual size: 208KB

.rsrc
Size: 24KB - Virtual size: 22KB

.svmp1
Size: - Virtual size: 3.8MB

.svmp2
Size: 3.8MB - Virtual size: 3.8MB

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

.svmp4
Size: 6.2MB - Virtual size: 6.2MB

.svmp5
Size: 12KB - Virtual size: 11KB

.svmp6
Size: 376KB - Virtual size: 375KB