b655a2da4b38fe201c3f27276d1125d6b13419bbfa649abc7d989e262fb51f84

Sharing

Copy URL Twitter E-mail

General

Target

b655a2da4b38fe201c3f27276d1125d6b13419bbfa649abc7d989e262fb51f84
Size

10.9MB
MD5

87a1eafee3771beaf4ef780afaac5b93
SHA1

c16a38af7191a0fbb7319f1c89c23ea76d6465f1
SHA256

b655a2da4b38fe201c3f27276d1125d6b13419bbfa649abc7d989e262fb51f84
SHA512

da211e042d9205be877f0ad90058745e7d667dcce9aea4a3394f2c5f7a0f631d41df4b94e701db6636a81abed3714861ee6e938063b98ed08988e515636607f5
SSDEEP

196608:/deHll41imNxm90KvoS6U4IHvupNInnSnNcT8VdA+28z/CHQyIQn8lV75dxUWyQf:8lL0xm90Kve/knnSN28I1m/OQyZn8H5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b655a2da4b38fe201c3f27276d1125d6b13419bbfa649abc7d989e262fb51f84

Files

b655a2da4b38fe201c3f27276d1125d6b13419bbfa649abc7d989e262fb51f84
.exe windows:5 windows x86

03c764db01ea6bb31b996d218e72f9d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

OpenSCManagerA

user32

GetWindowLongA

kernel32

SuspendThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

SetWindowOrgEx

version

GetFileVersionInfoSizeA

mpr

WNetGetConnectionA

ole32

StringFromCLSID

comctl32

ImageList_ReplaceIcon

urlmon

URLDownloadToFileA

shell32

SHGetFileInfoA

comdlg32

GetOpenFileNameA

wsock32

WSAAsyncSelect

winmm

timeGetTime

netapi32

Netbios

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 49KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03c764db01ea6bb31b996d218e72f9d5

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

mpr

ole32

comctl32

urlmon

shell32

comdlg32

wsock32

winmm

netapi32

Sections

.text Size: - Virtual size: 1.6MB

.itext Size: - Virtual size: 8KB

.data Size: - Virtual size: 81KB

.bss Size: - Virtual size: 49KB

.idata Size: - Virtual size: 15KB

.tls Size: - Virtual size: 80B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 6.7MB

.vmp1 Size: 5.0MB - Virtual size: 5.0MB

.reloc Size: 512B - Virtual size: 260B

.rsrc Size: 240KB - Virtual size: 239KB

.text
Size: - Virtual size: 1.6MB

.itext
Size: - Virtual size: 8KB

.data
Size: - Virtual size: 81KB

.bss
Size: - Virtual size: 49KB

.idata
Size: - Virtual size: 15KB

.tls
Size: - Virtual size: 80B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 6.7MB

.vmp1
Size: 5.0MB - Virtual size: 5.0MB

.reloc
Size: 512B - Virtual size: 260B

.rsrc
Size: 240KB - Virtual size: 239KB