ee6d36f4e568e5b13e0d959d0cdedfa17cc5bd7073f3fef54d2640b9b0b479c5

Sharing

Copy URL Twitter E-mail

General

Target

ee6d36f4e568e5b13e0d959d0cdedfa17cc5bd7073f3fef54d2640b9b0b479c5
Size

9.0MB
MD5

b5d9d2dc56ede6f4fa5ac318e708412e
SHA1

403f4706061659a42152b0367957136471390f6e
SHA256

ee6d36f4e568e5b13e0d959d0cdedfa17cc5bd7073f3fef54d2640b9b0b479c5
SHA512

9c8fb10db72c0aa16677ad1d0c4ce5f7ae88661b0e502bed18fa8a2b60611801e5464a9e4c0dbf5b65f6e2e385c2e18b7485da2a56957f392b30b33402025861
SSDEEP

196608:ugu2M+o2K25IKsxvhcZ0n6PUUy7xCcdxPSVQPVoi3IvHT23qxKhxvY+znG:9v/Y5yySUUy7x5MGPGiiuqkxxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee6d36f4e568e5b13e0d959d0cdedfa17cc5bd7073f3fef54d2640b9b0b479c5

Files

ee6d36f4e568e5b13e0d959d0cdedfa17cc5bd7073f3fef54d2640b9b0b479c5
.exe windows x86

97bfc588a91b29ca065eec1ef366f067

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

iphlpapi

GetAdaptersInfo

winmm

midiStreamRestart

ws2_32

inet_ntoa

rasapi32

RasGetConnectStatusA

kernel32

GetCurrentProcess

user32

LoadStringA

gdi32

GetStockObject

winspool.drv

DocumentPropertiesA

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

_TrackMouseEvent

wininet

InternetConnectA

msvcrt

strncpy

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 8.0MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

97bfc588a91b29ca065eec1ef366f067

Headers

File Characteristics

Imports

msvfw32

avifil32

iphlpapi

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

msvcrt

psapi

Exports

Exports

Sections

.text Size: 8.0MB - Virtual size: 8.9MB

.sedata Size: 1016KB - Virtual size: 1016KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 8.0MB - Virtual size: 8.9MB

.sedata
Size: 1016KB - Virtual size: 1016KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB