f2dd8267916f9a6f65406b61b152031ccfef2fe88ed0e5dab3ea4d8260f4f124

Sharing

Copy URL

Twitter E-mail

General

Target

f2dd8267916f9a6f65406b61b152031ccfef2fe88ed0e5dab3ea4d8260f4f124
Size

13.4MB
MD5

62d1dce617dbb85a87c1b2d398237fc1
SHA1

c4692a3a27268f71f0faea5a7af4bb0eb1139142
SHA256

f2dd8267916f9a6f65406b61b152031ccfef2fe88ed0e5dab3ea4d8260f4f124
SHA512

a67200cbc0647e8e24c3c3141ddf4641eca75d625239c391808e5baa25aa37f6b4cb0525a6247f87567f8f318dfcaec940fb44f7d36a240e9462c571ae0fc0c2
SSDEEP

196608:5VCSPegnAjUzx9q29Orq3PPTMEpxgrxEj62giPz8Cctfr4fLMrUVYkv1RWNtw7mh:5s2eg229Orq3XQxTJw85r+1Pv1nCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2dd8267916f9a6f65406b61b152031ccfef2fe88ed0e5dab3ea4d8260f4f124

Files

f2dd8267916f9a6f65406b61b152031ccfef2fe88ed0e5dab3ea4d8260f4f124
.exe windows x86

d1d6ac5b63c85a0c04765749c8819a37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasHangUpA

winmm

waveOutRestart

ws2_32

inet_ntoa

kernel32

GetLocalTime

user32

GetSysColorBrush

gdi32

CombineRgn

msimg32

GradientFill

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

DragQueryFileA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetLBound

comctl32

ord17

wldap32

ord29

wininet

InternetCloseHandle

Sections

.text
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 622KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 452KB - Virtual size: 450KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d1d6ac5b63c85a0c04765749c8819a37

Headers

File Characteristics

Imports

msvfw32

avifil32

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wldap32

wininet

Sections

.text Size: - Virtual size: 1.8MB

.rdata Size: - Virtual size: 3.0MB

.data Size: - Virtual size: 622KB

.rsrc Size: 296KB - Virtual size: 295KB

.svmp1 Size: - Virtual size: 3.9MB

.svmp2 Size: 5.7MB - Virtual size: 5.7MB

.svmp3 Size: 1.2MB - Virtual size: 1.2MB

.svmp4 Size: 5.7MB - Virtual size: 5.7MB

.svmp5 Size: 12KB - Virtual size: 10KB

.svmp6 Size: 452KB - Virtual size: 450KB

.text
Size: - Virtual size: 1.8MB

.rdata
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 622KB

.rsrc
Size: 296KB - Virtual size: 295KB

.svmp1
Size: - Virtual size: 3.9MB

.svmp2
Size: 5.7MB - Virtual size: 5.7MB

.svmp3
Size: 1.2MB - Virtual size: 1.2MB

.svmp4
Size: 5.7MB - Virtual size: 5.7MB

.svmp5
Size: 12KB - Virtual size: 10KB

.svmp6
Size: 452KB - Virtual size: 450KB