75b4b29a6c2714b74a2df87bb1a9cd846371b7a8a13deb94d1317b151f17b86f

Sharing

Copy URL Twitter E-mail

General

Target

75b4b29a6c2714b74a2df87bb1a9cd846371b7a8a13deb94d1317b151f17b86f
Size

14.1MB
MD5

3de331a2b5058696729ba5a340677ed7
SHA1

2c3e2eb1373b0affcdd39b3383b06c3063c2c84e
SHA256

75b4b29a6c2714b74a2df87bb1a9cd846371b7a8a13deb94d1317b151f17b86f
SHA512

19049e0cedaf38f9195b325af16b9307e2f873c2fec9a7b4075c98cd600a0d2e8771070bedde3d64c21e6028e4414812d53cb98c2015ae0c4c33cac94149acb3
SSDEEP

196608:90QG2xOzCA8IMoiVgEPSbsismBKpdqC7MRPOZ4a1iZtW5JbsDh3A63dh:a7oOIVgaWVUn57Mm0tWfih3AG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b4b29a6c2714b74a2df87bb1a9cd846371b7a8a13deb94d1317b151f17b86f

Files

75b4b29a6c2714b74a2df87bb1a9cd846371b7a8a13deb94d1317b151f17b86f
.exe windows:4 windows x86

1e8e307e33907a46266be63197d69c80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

iphlpapi

GetAdaptersInfo

winmm

midiStreamClose

ws2_32

ntohl

kernel32

QueryPerformanceCounter

user32

CheckMenuItem

gdi32

Chord

msimg32

GradientFill

winspool.drv

OpenPrinterA

comdlg32

ChooseColorA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayAccessData

comctl32

ord17

Sections

.text
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1e8e307e33907a46266be63197d69c80

Headers

File Characteristics

Imports

msvfw32

avifil32

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: - Virtual size: 2.1MB

.rdata Size: - Virtual size: 2.3MB

.data Size: - Virtual size: 492KB

.rsrc Size: 36KB - Virtual size: 35KB

.svmp1 Size: - Virtual size: 3.8MB

.svmp2 Size: 5.7MB - Virtual size: 5.7MB

.svmp3 Size: 2.5MB - Virtual size: 2.5MB

.svmp4 Size: 5.4MB - Virtual size: 5.4MB

.svmp5 Size: 12KB - Virtual size: 8KB

.svmp6 Size: 440KB - Virtual size: 436KB

.text
Size: - Virtual size: 2.1MB

.rdata
Size: - Virtual size: 2.3MB

.data
Size: - Virtual size: 492KB

.rsrc
Size: 36KB - Virtual size: 35KB

.svmp1
Size: - Virtual size: 3.8MB

.svmp2
Size: 5.7MB - Virtual size: 5.7MB

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

.svmp4
Size: 5.4MB - Virtual size: 5.4MB

.svmp5
Size: 12KB - Virtual size: 8KB

.svmp6
Size: 440KB - Virtual size: 436KB