11f7fcd281238f6556dd547f85c17eace0e179b90588440424808cbb698384d6

Sharing

Copy URL

Twitter E-mail

General

Target

11f7fcd281238f6556dd547f85c17eace0e179b90588440424808cbb698384d6
Size

12.9MB
MD5

8c05988b4dbe37f4b18b4507faa356d1
SHA1

f31931035baab2c023366311139a9d4002e1bde6
SHA256

11f7fcd281238f6556dd547f85c17eace0e179b90588440424808cbb698384d6
SHA512

fcb0dd7008e07583f03b102f9c27ed2ff784e559c0da3c364918abd9ad805a3d111f7cd5a4c42f2713bccee13cd67b34bd6abde0cae75b26cb372d15bfe5dabb
SSDEEP

393216:3DglOQVhwMtfNTni/IgkgLPZoEj/qir2asd:zgl3fdNTnixkwj/O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f7fcd281238f6556dd547f85c17eace0e179b90588440424808cbb698384d6

Files

11f7fcd281238f6556dd547f85c17eace0e179b90588440424808cbb698384d6
.exe windows:4 windows x86

1a327f4e49f7fefae8c3938729f3094a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamStop

ws2_32

htons

kernel32

SetLastError

user32

PeekMessageA

gdi32

ExtSelectClipRgn

winspool.drv

ClosePrinter

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetIcon

wldap32

ord29

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 424KB - Virtual size: 420KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1a327f4e49f7fefae8c3938729f3094a

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wldap32

comdlg32

Sections

.text Size: - Virtual size: 840KB

.rdata Size: - Virtual size: 2.2MB

.data Size: - Virtual size: 370KB

.rsrc Size: 88KB - Virtual size: 86KB

.svmp1 Size: - Virtual size: 3.8MB

.svmp2 Size: 4.9MB - Virtual size: 4.9MB

.svmp3 Size: 1.6MB - Virtual size: 1.6MB

.svmp4 Size: 5.8MB - Virtual size: 5.8MB

.svmp5 Size: 12KB - Virtual size: 11KB

.svmp6 Size: 424KB - Virtual size: 420KB

.text
Size: - Virtual size: 840KB

.rdata
Size: - Virtual size: 2.2MB

.data
Size: - Virtual size: 370KB

.rsrc
Size: 88KB - Virtual size: 86KB

.svmp1
Size: - Virtual size: 3.8MB

.svmp2
Size: 4.9MB - Virtual size: 4.9MB

.svmp3
Size: 1.6MB - Virtual size: 1.6MB

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

.svmp5
Size: 12KB - Virtual size: 11KB

.svmp6
Size: 424KB - Virtual size: 420KB