fa167b1ea8d2b2cb4e4b32b76ae5af3d18ca8da3790fe6c1c28b959f1ffdf525

Sharing

Copy URL Twitter E-mail

General

Target

fa167b1ea8d2b2cb4e4b32b76ae5af3d18ca8da3790fe6c1c28b959f1ffdf525
Size

11.8MB
MD5

60c7f64c46e6b0fb1d6b6e0b5035a968
SHA1

7cf4857f6555c5d8def392567aaecf05e74009a3
SHA256

fa167b1ea8d2b2cb4e4b32b76ae5af3d18ca8da3790fe6c1c28b959f1ffdf525
SHA512

19505d04506ae4d545741af1d6d2d66c80b695db6840158e9b321f10bd982a27e5cbbcd9f5a291afda8b92874cd2f73d9af47cee1813d63624bf88aeef7e77f4
SSDEEP

196608:WgM6yEC/IkB7hnB8fU3kGP+3ge6KpdqC7MRPOZt9lGt1xGFzt939UMQutzCGXRLZ:WbhECwinB8fUUj5n57MqH0rUt93hQSC0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa167b1ea8d2b2cb4e4b32b76ae5af3d18ca8da3790fe6c1c28b959f1ffdf525

Files

fa167b1ea8d2b2cb4e4b32b76ae5af3d18ca8da3790fe6c1c28b959f1ffdf525
.exe windows x86

b4807a5ab4c6e52016078bc07fca50de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

lstrcmpiA

user32

GetCursorPos

gdi32

DeleteObject

winmm

waveOutUnprepareHeader

winspool.drv

DocumentPropertiesA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

closesocket

wininet

InternetReadFile

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 4.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 420KB - Virtual size: 417KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4807a5ab4c6e52016078bc07fca50de

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

Sections

.text Size: - Virtual size: 505KB

.rdata Size: - Virtual size: 78KB

.data Size: - Virtual size: 219KB

.rsrc Size: 68KB - Virtual size: 65KB

.svmp1 Size: - Virtual size: 4.1MB

.svmp2 Size: 3.6MB - Virtual size: 3.6MB

.svmp3 Size: 2.5MB - Virtual size: 2.5MB

.svmp4 Size: 5.2MB - Virtual size: 5.2MB

.svmp5 Size: 16KB - Virtual size: 12KB

.svmp6 Size: 420KB - Virtual size: 417KB

.text
Size: - Virtual size: 505KB

.rdata
Size: - Virtual size: 78KB

.data
Size: - Virtual size: 219KB

.rsrc
Size: 68KB - Virtual size: 65KB

.svmp1
Size: - Virtual size: 4.1MB

.svmp2
Size: 3.6MB - Virtual size: 3.6MB

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

.svmp4
Size: 5.2MB - Virtual size: 5.2MB

.svmp5
Size: 16KB - Virtual size: 12KB

.svmp6
Size: 420KB - Virtual size: 417KB