ee5a86c68e3287249261648f775181964d6578ac04bf10ef0dc3695f584eba10

Sharing

Copy URL

Twitter E-mail

General

Target

ee5a86c68e3287249261648f775181964d6578ac04bf10ef0dc3695f584eba10
Size

12.9MB
MD5

ef5a940b6f73df0d1cf80e3122e28c3e
SHA1

ac0c39e907965b6b12e3e79bab6fc66f6ca90495
SHA256

ee5a86c68e3287249261648f775181964d6578ac04bf10ef0dc3695f584eba10
SHA512

fa6433e85455fac93d70dd64b51b2886e0d410dc4e1bd597f0b78da172161b2792a5d12a475f895e2aa0de7fa5402894de572e744f13186c808fc9de842a0928
SSDEEP

393216:MFgVCEQvhh/zfuM7akdRG5MKUcS9e75GFUu:rYHH0/ys5GF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee5a86c68e3287249261648f775181964d6578ac04bf10ef0dc3695f584eba10

Files

ee5a86c68e3287249261648f775181964d6578ac04bf10ef0dc3695f584eba10
.exe windows x86

2938403cc172ca69dd723cf6ba1ed974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetClipboardData

gdi32

SetViewportExtEx

winmm

midiStreamClose

winspool.drv

DocumentPropertiesA

advapi32

SetSecurityDescriptorDacl

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

accept

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[vnDsdf
Size: - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.A4hp:Qn
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|z{w\GQ
Size: 12.9MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2938403cc172ca69dd723cf6ba1ed974

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 3.3MB

.data Size: - Virtual size: 202KB

.[vnDsdf Size: - Virtual size: 8.9MB

.A4hp:Qn Size: 4KB - Virtual size: 2KB

.|z{w\GQ Size: 12.9MB - Virtual size: 12.9MB

.rsrc Size: 4KB - Virtual size: 478B

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 3.3MB

.data
Size: - Virtual size: 202KB

.[vnDsdf
Size: - Virtual size: 8.9MB

.A4hp:Qn
Size: 4KB - Virtual size: 2KB

.|z{w\GQ
Size: 12.9MB - Virtual size: 12.9MB

.rsrc
Size: 4KB - Virtual size: 478B