cfdfd8c4f63719a3df05c1285cb5b1adb683432044ae624a2e9e39fc6fc91011

Sharing

Copy URL Twitter E-mail

General

Target

cfdfd8c4f63719a3df05c1285cb5b1adb683432044ae624a2e9e39fc6fc91011
Size

8.3MB
MD5

d48e9eb6ccc75428f97a6e705910d4d1
SHA1

3729929171995cb3089e9ba582e05ec980aa5656
SHA256

cfdfd8c4f63719a3df05c1285cb5b1adb683432044ae624a2e9e39fc6fc91011
SHA512

ba1b28b7155dce531714a3f7034624a66b83f05653e5a4b1aa0a57b9e17b19c2f68e5529289933c665fb6264b1072571d958a69f51987baf770a8516610cb75f
SSDEEP

196608:9djNyr6zoFDbpl0sr2nrBana22xviOayrarU:npzkcsINaH25BayD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfdfd8c4f63719a3df05c1285cb5b1adb683432044ae624a2e9e39fc6fc91011

Files

cfdfd8c4f63719a3df05c1285cb5b1adb683432044ae624a2e9e39fc6fc91011
.exe windows:5 windows x86

a55cb9a5005452e579572cfc4c99ed31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
SetSystemTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetScrollRange

gdi32

GetTextColor

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

AllocateAndInitializeSid

shell32

SHGetSpecialFolderPathA

comctl32

_TrackMouseEvent

shlwapi

PathStripToRootA

oledlg

ord8

ole32

StgOpenStorageOnILockBytes

oleaut32

SysFreeString

gdiplus

GdipCreateTexture

ws2_32

socket

wininet

InternetGetLastResponseInfoA

winmm

mciSendStringA

Sections

.text
Size: - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data30
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data31
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a55cb9a5005452e579572cfc4c99ed31

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

wininet

winmm

Sections

.text Size: - Virtual size: 474KB

.rdata Size: - Virtual size: 119KB

.data Size: - Virtual size: 42KB

.data30 Size: - Virtual size: 8.2MB

.data31 Size: 8.3MB - Virtual size: 8.3MB

.reloc Size: 512B - Virtual size: 292B

.rsrc Size: 69KB - Virtual size: 68KB

.text
Size: - Virtual size: 474KB

.rdata
Size: - Virtual size: 119KB

.data
Size: - Virtual size: 42KB

.data30
Size: - Virtual size: 8.2MB

.data31
Size: 8.3MB - Virtual size: 8.3MB

.reloc
Size: 512B - Virtual size: 292B

.rsrc
Size: 69KB - Virtual size: 68KB