3755a008bdc2d41ef11f4e5cd91d99ff6d1dc36eba74a85ed083dfe91e18ea8a

Sharing

Copy URL Twitter E-mail

General

Target

3755a008bdc2d41ef11f4e5cd91d99ff6d1dc36eba74a85ed083dfe91e18ea8a
Size

7.6MB
MD5

054b3b25e9ac063c15908cdd03fddccc
SHA1

0bdc2ff0b2e11788b86ea971e6ea432947b77878
SHA256

3755a008bdc2d41ef11f4e5cd91d99ff6d1dc36eba74a85ed083dfe91e18ea8a
SHA512

df2f5e2a4e12d23ad2348961909d417359141ebee9fd6dfca8f61e717a87e46b0231f186bfc46177bb5ecbccd8d3c4f138b5b23066c034a6d927e85d0bfbc73d
SSDEEP

98304:qcS1Nmbl/UUMSatg0Bajj2lawxc0WooLXFevLiCUEvDUrhSH7Vv+GkzQuTuIaUIt:0qb+UtatNwwaIc0ILXFkLiCUqDP7opW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3755a008bdc2d41ef11f4e5cd91d99ff6d1dc36eba74a85ed083dfe91e18ea8a

Files

3755a008bdc2d41ef11f4e5cd91d99ff6d1dc36eba74a85ed083dfe91e18ea8a
.exe windows:5 windows x86

447f6c339b32744c1a39a299003b9611

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetCursorPos
CharUpperBuffW

gdi32

GetClipBox

winmm

waveOutUnprepareHeader

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleRun

oleaut32

VariantCopy

comctl32

ImageList_Read

ws2_32

WSACleanup

wininet

HttpOpenRequestA

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Qf$
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.a4j
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.E(W
Size: 7.6MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

447f6c339b32744c1a39a299003b9611

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

Sections

.text Size: - Virtual size: 2.5MB

.rdata Size: - Virtual size: 1.0MB

.data Size: - Virtual size: 294KB

.Qf$ Size: - Virtual size: 3.8MB

.a4j Size: 4KB - Virtual size: 2KB

.E(W Size: 7.6MB - Virtual size: 7.6MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 2.5MB

.rdata
Size: - Virtual size: 1.0MB

.data
Size: - Virtual size: 294KB

.Qf$
Size: - Virtual size: 3.8MB

.a4j
Size: 4KB - Virtual size: 2KB

.E(W
Size: 7.6MB - Virtual size: 7.6MB

.rsrc
Size: 8KB - Virtual size: 6KB