57238f0da5c72c7790183bdd59bdaa46a220df47c3667ea7ec680237721e9996

Sharing

Copy URL

Twitter E-mail

General

Target

57238f0da5c72c7790183bdd59bdaa46a220df47c3667ea7ec680237721e9996
Size

4.7MB
MD5

0469c22baeab365591a5b444d4d31a34
SHA1

c5764b0a3c8e3dbbaffbd99110eec37140719684
SHA256

57238f0da5c72c7790183bdd59bdaa46a220df47c3667ea7ec680237721e9996
SHA512

95ccf35982511454aa5d0e5bb9d0ba4d2dbcc92de4d453947c05e96821726a909fcff021efd8f507f8139c904a0108ffc67539e216482e369ade9f0a9c62a21f
SSDEEP

98304:DNdlHvlt03iESlLOvhKCP9tEZdXNTPCHuJqnJwTrSHBLonNr:DNXHzMinlL8KCPUZddTVqq3SHBsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57238f0da5c72c7790183bdd59bdaa46a220df47c3667ea7ec680237721e9996

Files

57238f0da5c72c7790183bdd59bdaa46a220df47c3667ea7ec680237721e9996
.exe windows x86

4b970d30f2fea0f1beac5c03738b1258

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleDestroyMenuDescriptor

shell32

DragQueryFileA

advapi32

GetFileSecurityA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA

wininet

InternetSetOptionExA

imm32

ImmGetOpenStatus

oleacc

CreateStdAccessibleObject

gdiplus

GdipDrawImageI

oledlg

ord8

shlwapi

PathRemoveFileSpecW

comctl32

InitCommonControlsEx

msimg32

TransparentBlt

oleaut32

VariantChangeType

gdi32

GetViewportExtEx

user32

DrawMenuBar

kernel32

SetLastError

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b970d30f2fea0f1beac5c03738b1258

Headers

DLL Characteristics

File Characteristics

Imports

ole32

shell32

advapi32

comdlg32

winspool.drv

wininet

imm32

oleacc

gdiplus

oledlg

shlwapi

comctl32

msimg32

oleaut32

gdi32

user32

kernel32

Sections

.text Size: - Virtual size: 1.5MB

.rdata Size: - Virtual size: 344KB

.data Size: - Virtual size: 58KB

.vdata Size: - Virtual size: 1.3MB

.text Size: - Virtual size: 1.9MB

.data Size: - Virtual size: 42KB

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 1024B - Virtual size: 736B

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: - Virtual size: 1.5MB

.rdata
Size: - Virtual size: 344KB

.data
Size: - Virtual size: 58KB

.vdata
Size: - Virtual size: 1.3MB

.text
Size: - Virtual size: 1.9MB

.data
Size: - Virtual size: 42KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 1024B - Virtual size: 736B

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB