b262ba8327b42c3169553b50b1458e5fb591198907fa7c3b756523b80480bbd3

Sharing

Copy URL

Twitter E-mail

General

Target

b262ba8327b42c3169553b50b1458e5fb591198907fa7c3b756523b80480bbd3
Size

13.3MB
MD5

9dccd215a20e962155e394e95d8d1ba6
SHA1

68f5ebe995fdc7825ff8dcaab7e465fa09fcf94d
SHA256

b262ba8327b42c3169553b50b1458e5fb591198907fa7c3b756523b80480bbd3
SHA512

6ddb81bd161532bd76df5ffc7001b48535d72f613d4fb44ca7691feb12b40a79a6fc6488e8ed700f1c30a82e2c13adf94c9598e0baebd06f723c566f734a09ed
SSDEEP

393216:rS/htwUsZNoILgF4nKx4MpBnp1miuAJx:ruwUeNoagKMpBnp1mHAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b262ba8327b42c3169553b50b1458e5fb591198907fa7c3b756523b80480bbd3

Files

b262ba8327b42c3169553b50b1458e5fb591198907fa7c3b756523b80480bbd3
.exe windows x86

5de92fdfd3abd08983aded11eb7768dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime

user32

GetScrollPos

gdi32

GetWindowOrgEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ord17

ws2_32

closesocket

wldap32

ord29

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 4.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 748KB - Virtual size: 746KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5de92fdfd3abd08983aded11eb7768dc

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wldap32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 2.9MB

.data Size: - Virtual size: 371KB

.rsrc Size: 40KB - Virtual size: 36KB

.svmp1 Size: - Virtual size: 4.0MB

.svmp2 Size: 6.2MB - Virtual size: 6.2MB

.svmp3 Size: 748KB - Virtual size: 746KB

.svmp4 Size: 5.9MB - Virtual size: 5.9MB

.svmp5 Size: 16KB - Virtual size: 12KB

.svmp6 Size: 428KB - Virtual size: 424KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 2.9MB

.data
Size: - Virtual size: 371KB

.rsrc
Size: 40KB - Virtual size: 36KB

.svmp1
Size: - Virtual size: 4.0MB

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

.svmp3
Size: 748KB - Virtual size: 746KB

.svmp4
Size: 5.9MB - Virtual size: 5.9MB

.svmp5
Size: 16KB - Virtual size: 12KB

.svmp6
Size: 428KB - Virtual size: 424KB