38a7f3e1d4974d6c9182e064a2c168d9c2d07daa72516d9f75c445fee5799fb2

Sharing

Copy URL

Twitter E-mail

General

Target

38a7f3e1d4974d6c9182e064a2c168d9c2d07daa72516d9f75c445fee5799fb2
Size

14.1MB
MD5

69dd2866c7ac9a0244851e3652eaeb18
SHA1

a6ba4fb8e00b3b7eb861b550dd1407694fb04065
SHA256

38a7f3e1d4974d6c9182e064a2c168d9c2d07daa72516d9f75c445fee5799fb2
SHA512

010f46c4efd58caf1dd82125491e6b97839b9503ba4d01f09cdf8dc696169ade6b0dfef07c8f3b8f5deffec4699a29d3c2a1bd92beb737f5748f63b8642697e1
SSDEEP

196608:0/9RdqdXNMXwOYC+3d9qLsUdBx89709IkU4kRrJlPmP8ClivmS9CvyF/:SdqlWZ67qLsUdQa9IkU4d8GiZwvyF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38a7f3e1d4974d6c9182e064a2c168d9c2d07daa72516d9f75c445fee5799fb2

Files

38a7f3e1d4974d6c9182e064a2c168d9c2d07daa72516d9f75c445fee5799fb2
.exe windows x86

da5f7b1f33e21ddf0a34c5259120b6e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oledlg

ord8

comctl32

_TrackMouseEvent

oleaut32

SysStringLen

ole32

CoRevokeClassObject

shell32

ShellExecuteA

advapi32

RegCloseKey

comdlg32

ChooseColorA

winspool.drv

OpenPrinterA

gdi32

GetBkColor

user32

UnregisterClassA

kernel32

CreateMutexA

version

VerLanguageNameA

ws2_32

WSAAsyncSelect

winmm

midiStreamStop

avifil32

AVIStreamInfoA

msvfw32

DrawDibDraw

Sections

.text
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da5f7b1f33e21ddf0a34c5259120b6e9

Headers

File Characteristics

Imports

oledlg

comctl32

oleaut32

ole32

shell32

advapi32

comdlg32

winspool.drv

gdi32

user32

kernel32

version

ws2_32

winmm

avifil32

msvfw32

Sections

.text Size: - Virtual size: 2.1MB

.rdata Size: - Virtual size: 2.1MB

.data Size: - Virtual size: 807KB

.vdata Size: - Virtual size: 2.9MB

.text Size: - Virtual size: 3.8MB

.data Size: - Virtual size: 2.0MB

.text Size: 11.3MB - Virtual size: 11.3MB

.data Size: 4KB - Virtual size: 1008B

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.text
Size: - Virtual size: 2.1MB

.rdata
Size: - Virtual size: 2.1MB

.data
Size: - Virtual size: 807KB

.vdata
Size: - Virtual size: 2.9MB

.text
Size: - Virtual size: 3.8MB

.data
Size: - Virtual size: 2.0MB

.text
Size: 11.3MB - Virtual size: 11.3MB

.data
Size: 4KB - Virtual size: 1008B

.rsrc
Size: 2.9MB - Virtual size: 2.9MB