237659ddd6a987f91d4a611f8159012329736cb3296930d4222ec5d77b270c5a

Sharing

Copy URL Twitter E-mail

General

Target

237659ddd6a987f91d4a611f8159012329736cb3296930d4222ec5d77b270c5a
Size

5.5MB
MD5

b334a15e6ce17d6b0973e5c18d7cc42c
SHA1

7d6f574e5c5f4e71c8ba9e32f8a3a22ebe0e6474
SHA256

237659ddd6a987f91d4a611f8159012329736cb3296930d4222ec5d77b270c5a
SHA512

2e0129b2dce6bcbac6ca6b13d68e7c1ba2ccb221f964dffbcbad4cc5cf86e7f7cac6de0d28c4aa6d2c984b310377029f1a7a0bfb0cd670d6b6fb6ff4eaea7b85
SSDEEP

98304:RVyjDODRf1mbJfgzK3XHMaLbr6acUCDCG4HI7mQGXK7sz73M4v3x:/EeSfYKFLb+DDxv7oagv3M4J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
237659ddd6a987f91d4a611f8159012329736cb3296930d4222ec5d77b270c5a

Files

237659ddd6a987f91d4a611f8159012329736cb3296930d4222ec5d77b270c5a
.exe windows x86

cdf1d6926d0616b434a1cf20497e2b29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

gethostname

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

kernel32

QueryPerformanceFrequency

user32

ScrollWindowEx

gdi32

GetViewportExtEx

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VariantCopyInd

comctl32

_TrackMouseEvent

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 4.2MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdf1d6926d0616b434a1cf20497e2b29

Headers

File Characteristics

Imports

winmm

ws2_32

msvfw32

avifil32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 4.2MB - Virtual size: 5.7MB

.sedata Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 20KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 4.2MB - Virtual size: 5.7MB

.sedata
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 20KB

.sedata
Size: 4KB - Virtual size: 4KB