b3f55e4fc40702116b3ffd0a4a6b08a6bb73e649a69ca4c3cd85890c0abb8640

Sharing

Copy URL Twitter E-mail

General

Target

b3f55e4fc40702116b3ffd0a4a6b08a6bb73e649a69ca4c3cd85890c0abb8640
Size

11.3MB
MD5

642b55608a1f313a811d328932c70597
SHA1

df5df765aedc9ce06c173ae5a76a160ea906e8bd
SHA256

b3f55e4fc40702116b3ffd0a4a6b08a6bb73e649a69ca4c3cd85890c0abb8640
SHA512

f4e3a3c50c4710eff8da59dddc320ebec2aba725db36af10ddf8ca041ba9af338a13a7f514bf0d7f6dac77aad37d389d461f0113be23f3e4a38f54b01c25ca08
SSDEEP

196608:0cY3Tk3RlqRph70FEiIQ0TmlnBHnBt4/zn/7rk1AK0HgGwOH0tEvVheyI9tY:0csTk3Snh70DILABht4/TPJKVGRUGTek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f55e4fc40702116b3ffd0a4a6b08a6bb73e649a69ca4c3cd85890c0abb8640

Files

b3f55e4fc40702116b3ffd0a4a6b08a6bb73e649a69ca4c3cd85890c0abb8640
.exe windows x86

359850209c2f8a44265adbd224911103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasHangUpA

winmm

waveOutRestart

ws2_32

inet_addr

kernel32

GetVersion

user32

CheckMenuItem

gdi32

RoundRect

msimg32

GradientFill

winspool.drv

OpenPrinterA

comdlg32

ChooseColorA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetElement

comctl32

ImageList_Read

wldap32

ord29

wininet

InternetConnectA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 519KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 4.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 444KB - Virtual size: 443KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

359850209c2f8a44265adbd224911103

Headers

File Characteristics

Imports

msvfw32

avifil32

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wldap32

wininet

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 713KB

.data Size: - Virtual size: 519KB

.rsrc Size: 44KB - Virtual size: 41KB

.svmp1 Size: - Virtual size: 4.1MB

.svmp2 Size: 4.2MB - Virtual size: 4.2MB

.svmp3 Size: 1.2MB - Virtual size: 1.2MB

.svmp4 Size: 5.5MB - Virtual size: 5.5MB

.svmp5 Size: 16KB - Virtual size: 12KB

.svmp6 Size: 444KB - Virtual size: 443KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 713KB

.data
Size: - Virtual size: 519KB

.rsrc
Size: 44KB - Virtual size: 41KB

.svmp1
Size: - Virtual size: 4.1MB

.svmp2
Size: 4.2MB - Virtual size: 4.2MB

.svmp3
Size: 1.2MB - Virtual size: 1.2MB

.svmp4
Size: 5.5MB - Virtual size: 5.5MB

.svmp5
Size: 16KB - Virtual size: 12KB

.svmp6
Size: 444KB - Virtual size: 443KB