f8f1f45d13cd02b6d7a5bbb3a09418336985daf49e0e5b05303f490176b25b0c

Sharing

Copy URL

Twitter E-mail

General

Target

f8f1f45d13cd02b6d7a5bbb3a09418336985daf49e0e5b05303f490176b25b0c
Size

2.9MB
MD5

9744774760a30929994fa295340c2059
SHA1

57ae1e5aa8dedaac89dd7197517ad4f5ec38bf63
SHA256

f8f1f45d13cd02b6d7a5bbb3a09418336985daf49e0e5b05303f490176b25b0c
SHA512

8cc6b715780fae3c9963e374d26a672f648c40a6d8c66d67a6d52f1cd397b7d4eea9b30b306d185a4d2f0e70756ba23f5dc17a85c8e5a64b4472d6b6d97ace94
SSDEEP

49152:YsGuDviaIoC6D6ojIWhhrAe8oO54V5cnByxXc/UjYSoXYg7b6Q5W5nMSH7wP+VGn:ouDCojIGrAeG5IcBy6/U6VujNVkP+VGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8f1f45d13cd02b6d7a5bbb3a09418336985daf49e0e5b05303f490176b25b0c

Files

f8f1f45d13cd02b6d7a5bbb3a09418336985daf49e0e5b05303f490176b25b0c
.exe windows x86

2b6000b76b2ba0f1f625c32c9b1965d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

winmm

midiStreamRestart

ws2_32

gethostname

rasapi32

RasHangUpA

kernel32

SetLastError

user32

SetMenuItemBitmaps

gdi32

Chord

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

comdlg32

ChooseColorA

advapi32

RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_AddMasked

wininet

InternetCloseHandle

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.6MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b6000b76b2ba0f1f625c32c9b1965d2

Headers

File Characteristics

Imports

msvfw32

avifil32

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.6MB - Virtual size: 3.1MB

.sedata Size: 1.1MB - Virtual size: 1.1MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 104KB - Virtual size: 104KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.6MB - Virtual size: 3.1MB

.sedata
Size: 1.1MB - Virtual size: 1.1MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 104KB - Virtual size: 104KB

.sedata
Size: 4KB - Virtual size: 4KB