d7fe68c115c7c0240579176ec1020fc6b5330cf5e8c35470452437557323ff98

Sharing

Copy URL Twitter E-mail

General

Target

d7fe68c115c7c0240579176ec1020fc6b5330cf5e8c35470452437557323ff98
Size

8.7MB
MD5

fe85b7a207dbae6d431deb6837acf306
SHA1

58acbdb9bceb1d26328de418d16a985f67961b79
SHA256

d7fe68c115c7c0240579176ec1020fc6b5330cf5e8c35470452437557323ff98
SHA512

57ea0d6612fc7a841d4a1e2914ed54df6e7b45e809a17e57b543d229849600e665e9e373d57725febb7c36068ab6fc2732c061631cf6f877c00ac4d4ba339f77
SSDEEP

196608:TvdlqVdSfRFetFp8Nje1N0Z/J1C1x7oAHZx9N7MZQ:TdlMcRITONje481JoAHZx9N7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7fe68c115c7c0240579176ec1020fc6b5330cf5e8c35470452437557323ff98

Files

d7fe68c115c7c0240579176ec1020fc6b5330cf5e8c35470452437557323ff98
.exe windows:5 windows x86

7158fab92d8dd5133b2095eb2dd1ed0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EnableMenuItem
CharUpperBuffW

gdi32

LineTo

msimg32

GradientFill

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetIcon

comdlg32

ChooseFontA

Sections

T-VMP
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: - Virtual size: 878KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T-VMP
Size: - Virtual size: 429KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T-VMP
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7158fab92d8dd5133b2095eb2dd1ed0f

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

T-VMP Size: - Virtual size: 1.4MB

T-VMP Size: - Virtual size: 878KB

T-VMP Size: - Virtual size: 429KB

T-VMP Size: - Virtual size: 3.6MB

T-VMP Size: 4KB - Virtual size: 2KB

T-VMP Size: 6.4MB - Virtual size: 6.4MB

T-VMP Size: 40KB - Virtual size: 39KB

T-VMP Size: 1.7MB - Virtual size: 1.7MB

T-VMP Size: 4KB - Virtual size: 4KB

T-VMP Size: 552KB - Virtual size: 551KB

T-VMP Size: 40KB - Virtual size: 39KB

T-VMP
Size: - Virtual size: 1.4MB

T-VMP
Size: - Virtual size: 878KB

T-VMP
Size: - Virtual size: 429KB

T-VMP
Size: - Virtual size: 3.6MB

T-VMP
Size: 4KB - Virtual size: 2KB

T-VMP
Size: 6.4MB - Virtual size: 6.4MB

T-VMP
Size: 40KB - Virtual size: 39KB

T-VMP
Size: 1.7MB - Virtual size: 1.7MB

T-VMP
Size: 4KB - Virtual size: 4KB

T-VMP
Size: 552KB - Virtual size: 551KB

T-VMP
Size: 40KB - Virtual size: 39KB