d609a7e2ba3159dd0dcb006c6654646dadfc3d021c54ce5c53e9fd23181d2668

Sharing

Copy URL

Twitter E-mail

General

Target

d609a7e2ba3159dd0dcb006c6654646dadfc3d021c54ce5c53e9fd23181d2668
Size

15.2MB
MD5

b6ffb59ae02430d9399f009d426e37ab
SHA1

cb1166b948c36cd3c495d8fe858e0d9784584c85
SHA256

d609a7e2ba3159dd0dcb006c6654646dadfc3d021c54ce5c53e9fd23181d2668
SHA512

ac48b2c1b9f3e927361d8689897a4a42a369d1205bb4419d75fbed105f5ba06b180768ca7ceb5be723c8bdb0782e892e10fa3277802c1ea1205294f683557681
SSDEEP

393216:TjR8ng1ZGP7vPN7yiNZDfjKrig41dcv1Hw:pCgil1Op41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d609a7e2ba3159dd0dcb006c6654646dadfc3d021c54ce5c53e9fd23181d2668

Files

d609a7e2ba3159dd0dcb006c6654646dadfc3d021c54ce5c53e9fd23181d2668
.exe windows:4 windows x86

2ffcd26c214b827c06360bcf6727c021

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

rasapi32

RasHangUpA

kernel32

MultiByteToWideChar

user32

LoadBitmapA

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_Add

wininet

InternetCloseHandle

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 4.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 672KB - Virtual size: 668KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.8MB - Virtual size: 5.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 412KB - Virtual size: 408KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2ffcd26c214b827c06360bcf6727c021

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 978KB

.rdata Size: - Virtual size: 4.8MB

.data Size: - Virtual size: 411KB

.rsrc Size: 24KB - Virtual size: 23KB

.svmp1 Size: - Virtual size: 4.3MB

.svmp2 Size: 8.3MB - Virtual size: 8.3MB

.svmp3 Size: 672KB - Virtual size: 668KB

.svmp4 Size: 5.8MB - Virtual size: 5.7MB

.svmp5 Size: 12KB - Virtual size: 10KB

.svmp6 Size: 412KB - Virtual size: 408KB

.text
Size: - Virtual size: 978KB

.rdata
Size: - Virtual size: 4.8MB

.data
Size: - Virtual size: 411KB

.rsrc
Size: 24KB - Virtual size: 23KB

.svmp1
Size: - Virtual size: 4.3MB

.svmp2
Size: 8.3MB - Virtual size: 8.3MB

.svmp3
Size: 672KB - Virtual size: 668KB

.svmp4
Size: 5.8MB - Virtual size: 5.7MB

.svmp5
Size: 12KB - Virtual size: 10KB

.svmp6
Size: 412KB - Virtual size: 408KB