644264a64440941e5fee0b28a1a7059cd67c52343774aede45f2beef23189c4d

Sharing

Copy URL Twitter E-mail

General

Target

644264a64440941e5fee0b28a1a7059cd67c52343774aede45f2beef23189c4d
Size

13.1MB
MD5

8157988e36b8cee0398db29670e39b7f
SHA1

82f14b1b1700f49025a020ca3cd50242c8f3d397
SHA256

644264a64440941e5fee0b28a1a7059cd67c52343774aede45f2beef23189c4d
SHA512

7a93f7dd86410e3e60450a90734475693dbacdd5f17633999201f22fc92ecb87578487672e827670de4786a8dce0f0ff6a577f96f1e07dd0e0fb468a49ebeab5
SSDEEP

196608:Ug3rPKooIuM3fp5YPguTU/KpdqC7MRPOZ/i1Xv5uqnqSizHb51y+i:1ryuugTqguTxn57Miixv5usNo/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644264a64440941e5fee0b28a1a7059cd67c52343774aede45f2beef23189c4d

Files

644264a64440941e5fee0b28a1a7059cd67c52343774aede45f2beef23189c4d
.exe windows:4 windows x86

331ee766f4207dc9ebf76aff1425705f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation

user32

GetForegroundWindow

gdi32

Escape

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

331ee766f4207dc9ebf76aff1425705f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 564KB

.rdata Size: - Virtual size: 3.4MB

.data Size: - Virtual size: 219KB

.rsrc Size: 28KB - Virtual size: 24KB

.svmp1 Size: - Virtual size: 3.1MB

.svmp2 Size: 5.1MB - Virtual size: 5.1MB

.svmp3 Size: 2.5MB - Virtual size: 2.5MB

.svmp4 Size: 5.1MB - Virtual size: 5.1MB

.svmp5 Size: 12KB - Virtual size: 8KB

.svmp6 Size: 404KB - Virtual size: 401KB

.text
Size: - Virtual size: 564KB

.rdata
Size: - Virtual size: 3.4MB

.data
Size: - Virtual size: 219KB

.rsrc
Size: 28KB - Virtual size: 24KB

.svmp1
Size: - Virtual size: 3.1MB

.svmp2
Size: 5.1MB - Virtual size: 5.1MB

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

.svmp4
Size: 5.1MB - Virtual size: 5.1MB

.svmp5
Size: 12KB - Virtual size: 8KB

.svmp6
Size: 404KB - Virtual size: 401KB