f409a75395596698e0d4af73701c54f3fecb2b383b375f172dd654d8e0c33daa

Sharing

Copy URL

Twitter E-mail

General

Target

f409a75395596698e0d4af73701c54f3fecb2b383b375f172dd654d8e0c33daa
Size

6.2MB
MD5

4d1e91397c8c17167da9188cd25f5fa2
SHA1

b0f2fe99f4b76ab1b248215ce4c90ba72fe8b6c6
SHA256

f409a75395596698e0d4af73701c54f3fecb2b383b375f172dd654d8e0c33daa
SHA512

5ef264e5be2589c7ffc08b71151f95cbce949a7037094f18f32ebca3ef416e1dc05d1cfed460e6086313995bb52c86e0a5d39f322704a4ac5f9409df8b930cea
SSDEEP

98304:uoHNZepsSVs2Z/oexNikDBqb+9y6V593NWvQW52ivHjOLM5yol+rQR2yOnoC+ZMy:uotZgs21BRddoQlSOLM8gYQVOJ+uhEq2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f409a75395596698e0d4af73701c54f3fecb2b383b375f172dd654d8e0c33daa

Files

f409a75395596698e0d4af73701c54f3fecb2b383b375f172dd654d8e0c33daa
.exe windows:5 windows x86

da22a7708d7bd108094eee28d2b2721f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shlwapi

PathFileExistsA

ws2_32

gethostname

oledlg

ord8

winspool.drv

ClosePrinter

Sections

.text
Size: 4.0MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hero
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

duen
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da22a7708d7bd108094eee28d2b2721f

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

user32

gdi32

version

mpr

ole32

comctl32

shell32

comdlg32

wsock32

gdiplus

msvcrt

iphlpapi

psapi

shlwapi

ws2_32

oledlg

winspool.drv

Sections

.text Size: 4.0MB - Virtual size: 8.7MB

.rsrc Size: 15KB - Virtual size: 16KB

hero Size: 4KB - Virtual size: 4KB

duen Size: - Virtual size: 1.1MB

text Size: - Virtual size: 1.0MB

.hero Size: 1.5MB - Virtual size: 1.5MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.hero Size: 4KB - Virtual size: 4KB

.text
Size: 4.0MB - Virtual size: 8.7MB

.rsrc
Size: 15KB - Virtual size: 16KB

hero
Size: 4KB - Virtual size: 4KB

duen
Size: - Virtual size: 1.1MB

text
Size: - Virtual size: 1.0MB

.hero
Size: 1.5MB - Virtual size: 1.5MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.hero
Size: 4KB - Virtual size: 4KB