8e5b20970ad1f8a4d4964e0927c830d71ac68e776c6ff8f4ecd8ef51435f9ad2

Sharing

Copy URL Twitter E-mail

General

Target

8e5b20970ad1f8a4d4964e0927c830d71ac68e776c6ff8f4ecd8ef51435f9ad2
Size

6.5MB
MD5

161d3d9bb75ae2327d14f7326434eb16
SHA1

2d3ab126d1439f5df6db20a9202774d1f287e54a
SHA256

8e5b20970ad1f8a4d4964e0927c830d71ac68e776c6ff8f4ecd8ef51435f9ad2
SHA512

f3cf1974398ea411267e3b238f264dc2defcdc94fd3e26d2278e5a42e74a0a1044c4bfb431b3760cb72cb02be2f2d429d6b367e53a3760cfb5f09a415844ee67
SSDEEP

98304:h0IeVmOw5SoIJPWu5TUdqAgdKpz3ER+Bql821y/5PCdJ5kE3HKzn22WZQHElKQ3s:h0ts5Wh53nIpbq6UaqdEE9S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e5b20970ad1f8a4d4964e0927c830d71ac68e776c6ff8f4ecd8ef51435f9ad2

Files

8e5b20970ad1f8a4d4964e0927c830d71ac68e776c6ff8f4ecd8ef51435f9ad2
.exe windows:5 windows x64

a0f69c13959aacf8f668b5b29e1a21c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mfc90u

ord2602

msvcr90

?_type_info_dtor_internal_method@type_info@@QEAAXXZ

kernel32

GetVersionExW
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA

user32

PostMessageW
CharUpperBuffW

gdi32

SelectObject

advapi32

RegSetValueExW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

shell32

ShellExecuteW

shlwapi

PathFileExistsW

ole32

OleLockRunning

oleaut32

GetErrorInfo

msvcp90

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

winhttp

WinHttpConnect

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersInfo

version

VerQueryValueW

wininet

InternetOpenW

psapi

GetModuleFileNameExW

ws2_32

closesocket

comctl32

_TrackMouseEvent

wtsapi32

WTSSendMessageW

Sections

.text
Size: 677KB - Virtual size: 677KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

SelfSec
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 519KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0f69c13959aacf8f668b5b29e1a21c1

Headers

DLL Characteristics

File Characteristics

Imports

mfc90u

msvcr90

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

oleaut32

msvcp90

winhttp

dbghelp

iphlpapi

version

wininet

psapi

ws2_32

comctl32

wtsapi32

Sections

.text Size: 677KB - Virtual size: 677KB

.rdata Size: 229KB - Virtual size: 229KB

.data Size: 6KB - Virtual size: 12KB

.pdata Size: 50KB - Virtual size: 49KB

SelfSec Size: 512B - Virtual size: 260B

.vmp0 Size: 5.0MB - Virtual size: 5.0MB

.vmp1 Size: 519KB - Virtual size: 518KB

.reloc Size: 7KB - Virtual size: 6KB

.rsrc Size: 36KB - Virtual size: 35KB

.text
Size: 677KB - Virtual size: 677KB

.rdata
Size: 229KB - Virtual size: 229KB

.data
Size: 6KB - Virtual size: 12KB

.pdata
Size: 50KB - Virtual size: 49KB

SelfSec
Size: 512B - Virtual size: 260B

.vmp0
Size: 5.0MB - Virtual size: 5.0MB

.vmp1
Size: 519KB - Virtual size: 518KB

.reloc
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 36KB - Virtual size: 35KB