245db897e42177faea8a716013a4da336bdec4f4d42d3bc8f02ba02b9387977c

Sharing

Copy URL Twitter E-mail

General

Target

245db897e42177faea8a716013a4da336bdec4f4d42d3bc8f02ba02b9387977c
Size

4.8MB
MD5

dcc9503909bfeaa34a6bf88e96388932
SHA1

09bd402a6f1e5cbd88db84bb44b4f2df834464fc
SHA256

245db897e42177faea8a716013a4da336bdec4f4d42d3bc8f02ba02b9387977c
SHA512

7302283768d288ba4b7bfcdc8332e7c4acf72ec201dd0e7af7f1fbda73b5aebc99e89aa381cd5c353f09b1df0cd454d9987c1d0c8dc6d444ebfe409b8fe092bb
SSDEEP

98304:vdKsHIRr56jDgjMDSLTtEMdN4wFAkA7MuXd7CNMblgO9L5wQMg:FKsHIRr56/UdGMLW7DN7mMbjL5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
245db897e42177faea8a716013a4da336bdec4f4d42d3bc8f02ba02b9387977c

Files

245db897e42177faea8a716013a4da336bdec4f4d42d3bc8f02ba02b9387977c
.exe windows:4 windows x86

b74eef0392500860a4c7696a174b9a3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

midiStreamOut

ws2_32

socket

rasapi32

RasGetConnectStatusA

kernel32

TerminateThread

user32

SetTimer

gdi32

RectVisible

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

StgCreateDocfileOnILockBytes

oleaut32

VariantChangeType

comctl32

ord17

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

msvcrt

strncpy

psapi

GetMappedFileNameW

Sections

.text
Size: 2.8MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b74eef0392500860a4c7696a174b9a3a

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

comdlg32

msvcrt

psapi

Sections

.text Size: 2.8MB - Virtual size: 4.2MB

.m Size: 2.0MB - Virtual size: 2.0MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 28KB - Virtual size: 28KB

.m Size: 4KB - Virtual size: 4KB

.text
Size: 2.8MB - Virtual size: 4.2MB

.m
Size: 2.0MB - Virtual size: 2.0MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 28KB - Virtual size: 28KB

.m
Size: 4KB - Virtual size: 4KB