b3dac16c961479f2cae339ee921bb66014c8ba0a2690254b8dd97238ca1c409e

Sharing

Copy URL Twitter E-mail

General

Target

b3dac16c961479f2cae339ee921bb66014c8ba0a2690254b8dd97238ca1c409e
Size

14.1MB
MD5

717eaa142b56f76d10b189077a7912fd
SHA1

3a9888a0fa09e1b64b068d915bf4f9bbb9c84ea6
SHA256

b3dac16c961479f2cae339ee921bb66014c8ba0a2690254b8dd97238ca1c409e
SHA512

77bfb6a94f5b783b719a55127e1b65dc8d52dc3ed08a159cbaa869630f28eb9cbff470755f8579d61ebbb5a8577de0c17128d63a27e37d304dc34cc6bcad3666
SSDEEP

393216:qhlRQU7xJnppzodsfXzbNpnwbcZWXWYQvJl4:qhlhppdnNpnwWWmYQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3dac16c961479f2cae339ee921bb66014c8ba0a2690254b8dd97238ca1c409e

Files

b3dac16c961479f2cae339ee921bb66014c8ba0a2690254b8dd97238ca1c409e
.exe windows:5 windows x86

0aad615f17bef7db603a41abcf5ce9a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

IsZoomed
CharUpperBuffW

gdi32

LineTo

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

DragFinish

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Add

wininet

DeleteUrlCacheEntry

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 954KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QsT
Size: - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.H9&
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.^uV
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0aad615f17bef7db603a41abcf5ce9a3

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 954KB

.rdata Size: - Virtual size: 9.8MB

.data Size: - Virtual size: 383KB

.QsT Size: - Virtual size: 4.7MB

.H9& Size: 4KB - Virtual size: 2KB

.^uV Size: 14.1MB - Virtual size: 14.1MB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: - Virtual size: 954KB

.rdata
Size: - Virtual size: 9.8MB

.data
Size: - Virtual size: 383KB

.QsT
Size: - Virtual size: 4.7MB

.H9&
Size: 4KB - Virtual size: 2KB

.^uV
Size: 14.1MB - Virtual size: 14.1MB

.rsrc
Size: 4KB - Virtual size: 3KB