45eb4c9a16a478f790f5a8a83088679bd285e278a3f146dfb045176114938257

Sharing

Copy URL

Twitter E-mail

General

Target

45eb4c9a16a478f790f5a8a83088679bd285e278a3f146dfb045176114938257
Size

7.5MB
MD5

a8b95d6e52c6b7c13e9feb1d0e63a9cb
SHA1

44ab47700be479a6edb42b491349168c10955a54
SHA256

45eb4c9a16a478f790f5a8a83088679bd285e278a3f146dfb045176114938257
SHA512

542a8ca38aab1ee51751876014f37b702e86fae710a6a0410b236f97d692ca5763c0fd883fa73eeed276f6d9cffa9a0f80b53794f78dc88ea4c4e014039eecd8
SSDEEP

98304:K5SfpVU6stCGlmeic8Y/hOE+akVDu9R0SesJ5tGOxeFOmUUqZvO6W9Aqxf+MYQ4y:Kg/stRYeX5/hOE+z8fE+wO7flo9Ley

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45eb4c9a16a478f790f5a8a83088679bd285e278a3f146dfb045176114938257

Files

45eb4c9a16a478f790f5a8a83088679bd285e278a3f146dfb045176114938257
.exe windows:5 windows x86

fcdf136f251a2822adfdc6fa743da911

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

OpenClipboard
CharUpperBuffW

gdi32

SetStretchBltMode

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recv

comdlg32

GetFileTitleA

Sections

.R1
Size: - Virtual size: 510KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.R1
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R1
Size: - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R1
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R1
Size: - Virtual size: 883KB

IMAGE_SCN_MEM_EXECUTE

.R1
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.R1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R1
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R1
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.R1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.R1
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.R1
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcdf136f251a2822adfdc6fa743da911

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.R1 Size: - Virtual size: 510KB

.R1 Size: - Virtual size: 74KB

.R1 Size: - Virtual size: 133KB

.R1 Size: - Virtual size: 23KB

.R1 Size: - Virtual size: 883KB

.R1 Size: - Virtual size: 2.9MB

.R1 Size: 4KB - Virtual size: 2KB

.R1 Size: 5.3MB - Virtual size: 5.3MB

.R1 Size: 8KB - Virtual size: 6KB

.R1 Size: 1.7MB - Virtual size: 1.7MB

.R1 Size: 4KB - Virtual size: 4KB

.R1 Size: 548KB - Virtual size: 547KB

.R1 Size: 8KB - Virtual size: 6KB

.R1
Size: - Virtual size: 510KB

.R1
Size: - Virtual size: 74KB

.R1
Size: - Virtual size: 133KB

.R1
Size: - Virtual size: 23KB

.R1
Size: - Virtual size: 883KB

.R1
Size: - Virtual size: 2.9MB

.R1
Size: 4KB - Virtual size: 2KB

.R1
Size: 5.3MB - Virtual size: 5.3MB

.R1
Size: 8KB - Virtual size: 6KB

.R1
Size: 1.7MB - Virtual size: 1.7MB

.R1
Size: 4KB - Virtual size: 4KB

.R1
Size: 548KB - Virtual size: 547KB

.R1
Size: 8KB - Virtual size: 6KB