91112a8eb0b10c64a5b3b283d27304a5d7bf332530a85a6b20f66b576e8e7885

Sharing

Copy URL Twitter E-mail

General

Target

91112a8eb0b10c64a5b3b283d27304a5d7bf332530a85a6b20f66b576e8e7885
Size

7.3MB
MD5

7e3427b8e9646cf74d7f2200af354c63
SHA1

943c36e000c2c364000085621f6ac98e3896cbbc
SHA256

91112a8eb0b10c64a5b3b283d27304a5d7bf332530a85a6b20f66b576e8e7885
SHA512

889c8cdf5233b58a7e06e201989d7de3a819f8304e8b2025383dec997d4049d34da4c2e878d01fe056d69c60f98143d4ba3b68b76bbf4b4c02d6eeebf54aa6f9
SSDEEP

98304:cMTJgjD00gzi0dxtk5EGWMANfqyjPALmQ7/T01j6DViAmf+Pltg/DUQiq:nmf0TJQEGefdjCmQzT+j3Aa+PDg7Uvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91112a8eb0b10c64a5b3b283d27304a5d7bf332530a85a6b20f66b576e8e7885

Files

91112a8eb0b10c64a5b3b283d27304a5d7bf332530a85a6b20f66b576e8e7885
.exe windows x86

500d8dd6317464e37e203f5c6838f4e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA

winmm

waveOutOpen

ws2_32

WSAAsyncSelect

kernel32

FindResourceA

user32

CharUpperA

gdi32

ExtSelectClipRgn

winspool.drv

DocumentPropertiesA

comdlg32

GetOpenFileNameW

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

SafeArrayAccessData

comctl32

ImageList_GetIcon

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.5MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eacd
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eacd
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

500d8dd6317464e37e203f5c6838f4e8

Headers

File Characteristics

Imports

rpcrt4

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.5MB - Virtual size: 3.4MB

.eacd Size: 5.8MB - Virtual size: 5.8MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.eacd Size: 4KB - Virtual size: 4KB

.text
Size: 1.5MB - Virtual size: 3.4MB

.eacd
Size: 5.8MB - Virtual size: 5.8MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.eacd
Size: 4KB - Virtual size: 4KB