a7e135780b822fb1da758f35e8e32dbdfec7ff3e5035d9605a66aef87cf82029

Sharing

Copy URL Twitter E-mail

General

Target

a7e135780b822fb1da758f35e8e32dbdfec7ff3e5035d9605a66aef87cf82029
Size

2.7MB
MD5

873b929c97c7f5ed401afc0124b80a3f
SHA1

8ddc43799615bd1eccd2260d664b866ab1b8ed83
SHA256

a7e135780b822fb1da758f35e8e32dbdfec7ff3e5035d9605a66aef87cf82029
SHA512

4e354155bc16c868042022c26a644caf1474b811cc7a8b8ad5665cea14bb1444a1a92fb2765450d0544bd721dcb435127af64be33fab3a9d8683813ec0387a05
SSDEEP

49152:Xn85RDcdquVLIuOJrmE2YwTQFSQXpoASWQnJhSKbK:XnuDYquJITJrmEWTUSQSASBnmF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7e135780b822fb1da758f35e8e32dbdfec7ff3e5035d9605a66aef87cf82029

Files

a7e135780b822fb1da758f35e8e32dbdfec7ff3e5035d9605a66aef87cf82029
.dll windows x86

9a8ce0902dd0865391bbb04a0822a31e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

midiStreamRestart

ws2_32

inet_ntoa

kernel32

SetLastError

user32

GetClipboardData

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

comdlg32

GetOpenFileNameA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

CDeZMMwPkcFWA
DvYlnJARTt
HWMMCxFuVg
Jisetlokbv
QD_CUTwbUxUYh
QD_SUMjHQzaaw
RGmyQTuvLm
TZ_IKGAGYdcBt
VEjsPkkHxb
XZ_BxINYsltTZ
XnsJvSjpAT
gLKNWsCNyW
mMKHoHzYUx
ncSVmSTfYb
uEyjjgoFKc
zmzMJvPlIj

Sections

.text
Size: 1004KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VuzL
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.VuzL
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a8ce0902dd0865391bbb04a0822a31e

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 1004KB - Virtual size: 1.7MB

.VuzL Size: 1.7MB - Virtual size: 1.7MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 4KB

.VuzL Size: 4KB - Virtual size: 4KB

.text
Size: 1004KB - Virtual size: 1.7MB

.VuzL
Size: 1.7MB - Virtual size: 1.7MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 4KB

.VuzL
Size: 4KB - Virtual size: 4KB