3efd47aa0e27fc6a6f5a695be69f71c763f1d1c8d131749027638823a242d253

Sharing

Copy URL Twitter E-mail

General

Target

3efd47aa0e27fc6a6f5a695be69f71c763f1d1c8d131749027638823a242d253
Size

1.9MB
MD5

f86d2be051292c97ebf2f75ceac36476
SHA1

b69e1697115c65f92337adfd7cb28d8981b2e9c2
SHA256

3efd47aa0e27fc6a6f5a695be69f71c763f1d1c8d131749027638823a242d253
SHA512

5b6c9deb0f2ae2ec7947dca8018772c64aa62a5e147f6e38708898e686acda7d3cdc49e12b8ea50b49fd3ee6532930ba1f9e1ff78f923d518914e73aa43aa98b
SSDEEP

49152:KeVUSeEW8YUxxYeF/ApKSZxtka6uNR5zI1B3oinfZVQX:fvxBZsTkZuNR9I1NoifZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3efd47aa0e27fc6a6f5a695be69f71c763f1d1c8d131749027638823a242d253

Files

3efd47aa0e27fc6a6f5a695be69f71c763f1d1c8d131749027638823a242d253
.exe windows:4 windows x86

ad2f4018355f32a63151cbd162bcde01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA

comctl32

ImageList_Destroy

oleaut32

RegisterTypeLi

ole32

OleInitialize

shell32

ShellExecuteA

advapi32

OpenProcessToken

winspool.drv

ClosePrinter

gdi32

GetSystemPaletteEntries

user32

ScrollWindowEx

kernel32

GetVersion

ws2_32

accept

winmm

waveOutPrepareHeader

Sections

.text
Size: - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 833KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad2f4018355f32a63151cbd162bcde01

Headers

File Characteristics

Imports

comdlg32

comctl32

oleaut32

ole32

shell32

advapi32

winspool.drv

gdi32

user32

kernel32

ws2_32

winmm

Sections

.text Size: - Virtual size: 679KB

.rdata Size: - Virtual size: 168KB

.data Size: - Virtual size: 229KB

.vdata Size: - Virtual size: 24KB

.text Size: - Virtual size: 615KB

.data Size: - Virtual size: 833KB

.text Size: 1.9MB - Virtual size: 1.9MB

.data Size: 4KB - Virtual size: 636B

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: - Virtual size: 679KB

.rdata
Size: - Virtual size: 168KB

.data
Size: - Virtual size: 229KB

.vdata
Size: - Virtual size: 24KB

.text
Size: - Virtual size: 615KB

.data
Size: - Virtual size: 833KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 4KB - Virtual size: 636B

.rsrc
Size: 24KB - Virtual size: 23KB