b8c7d3a556fc29d2a7b8c2bab9b69f36349595bda9defb50b4f5f4391bde1426

Sharing

Copy URL Twitter E-mail

General

Target

b8c7d3a556fc29d2a7b8c2bab9b69f36349595bda9defb50b4f5f4391bde1426
Size

14.9MB
MD5

d5bba74ddb656391e6a869a8f06cdd1f
SHA1

df52801a6bc56dc710c478ca776510c5c7889ce4
SHA256

b8c7d3a556fc29d2a7b8c2bab9b69f36349595bda9defb50b4f5f4391bde1426
SHA512

e83ddb315faf5507ccd00545de9289df8c207e5b38bcf007859995957ccc8132e7017aa8be7b17e07adf8bf752a1a287c78133c0318b52bfe79a72ed2686135a
SSDEEP

393216:rj7FS/ZlAONPYxYAlwNcynzAwrRhHxX8:r4suP3Alw6/wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c7d3a556fc29d2a7b8c2bab9b69f36349595bda9defb50b4f5f4391bde1426

Files

b8c7d3a556fc29d2a7b8c2bab9b69f36349595bda9defb50b4f5f4391bde1426
.dll windows:4 windows x86

4d2e22a4057e7833405813d2aa7619b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetOpenA

comctl32

ImageList_Create

oleaut32

VarDateFromStr

ole32

DoDragDrop

shell32

DragAcceptFiles

advapi32

RegCloseKey

comdlg32

GetSaveFileNameA

winspool.drv

OpenPrinterA

msimg32

GradientFill

gdi32

GetWindowOrgEx

user32

SetCapture

kernel32

InterlockedExchange

avifil32

AVIStreamGetFrame

msvfw32

DrawDibDraw

rasapi32

RasHangUpA

ws2_32

WSAStartup

winmm

waveOutClose

Sections

.text
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 13.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d2e22a4057e7833405813d2aa7619b8

Headers

File Characteristics

Imports

wininet

comctl32

oleaut32

ole32

shell32

advapi32

comdlg32

winspool.drv

msimg32

gdi32

user32

kernel32

avifil32

msvfw32

rasapi32

ws2_32

winmm

Sections

.text Size: - Virtual size: 3.1MB

.rdata Size: - Virtual size: 13.3MB

.data Size: - Virtual size: 768KB

.vdata Size: - Virtual size: 40KB

.text Size: - Virtual size: 3.0MB

.data Size: - Virtual size: 40KB

.text Size: 14.9MB - Virtual size: 14.9MB

.data Size: 4KB - Virtual size: 680B

.reloc Size: 4KB - Virtual size: 856B

.rsrc Size: 40KB - Virtual size: 37KB

.text
Size: - Virtual size: 3.1MB

.rdata
Size: - Virtual size: 13.3MB

.data
Size: - Virtual size: 768KB

.vdata
Size: - Virtual size: 40KB

.text
Size: - Virtual size: 3.0MB

.data
Size: - Virtual size: 40KB

.text
Size: 14.9MB - Virtual size: 14.9MB

.data
Size: 4KB - Virtual size: 680B

.reloc
Size: 4KB - Virtual size: 856B

.rsrc
Size: 40KB - Virtual size: 37KB