d5572fda7f8aa45b13e5c3387d70ee72a333fc9c7f599d80a843c9e894c2616c

Sharing

Copy URL Twitter E-mail

General

Target

d5572fda7f8aa45b13e5c3387d70ee72a333fc9c7f599d80a843c9e894c2616c
Size

3.5MB
MD5

21f779183fd07eed5234f9cb7ac766a5
SHA1

8473d46353a81795cf0fe19b2780fa37a15dbe52
SHA256

d5572fda7f8aa45b13e5c3387d70ee72a333fc9c7f599d80a843c9e894c2616c
SHA512

e911247622e8de5bb9a049e9076509c7dfc54747b230a407d01e4c9a4d5d7178cfe6b4253c9ea696ac37ffdd49eb34841840c77bc06cc8e78b9f9775f338acaa
SSDEEP

98304:hTf6DobRSppoARSjzIdn4sqrbQH4FP8OphyYRJ:df6DolARwpdnQH4FP8evRJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5572fda7f8aa45b13e5c3387d70ee72a333fc9c7f599d80a843c9e894c2616c

Files

d5572fda7f8aa45b13e5c3387d70ee72a333fc9c7f599d80a843c9e894c2616c
.exe windows:5 windows x86

f8163aacaa093b29b3dbc1a425d1a76e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetClipboardData
CharUpperBuffW

gdi32

GetClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SysAllocString

comctl32

ImageList_Destroy

oledlg

ord8

ws2_32

recvfrom

comdlg32

GetSaveFileNameA

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 775KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.H0
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.H1
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8163aacaa093b29b3dbc1a425d1a76e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

ws2_32

comdlg32

wtsapi32

Sections

.text Size: - Virtual size: 588KB

.rdata Size: - Virtual size: 775KB

.data Size: - Virtual size: 147KB

.H0 Size: - Virtual size: 2.5MB

.H1 Size: 3.5MB - Virtual size: 3.5MB

.reloc Size: 4KB - Virtual size: 284B

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: - Virtual size: 588KB

.rdata
Size: - Virtual size: 775KB

.data
Size: - Virtual size: 147KB

.H0
Size: - Virtual size: 2.5MB

.H1
Size: 3.5MB - Virtual size: 3.5MB

.reloc
Size: 4KB - Virtual size: 284B

.rsrc
Size: 8KB - Virtual size: 5KB