faf84392150ee55705028f09483dd5f3cdf0cf6dfca5b90483a6b85eb67246da

Sharing

Copy URL

Twitter E-mail

General

Target

faf84392150ee55705028f09483dd5f3cdf0cf6dfca5b90483a6b85eb67246da
Size

1.5MB
MD5

78ebc16d8367fd8eabe8b89f31539705
SHA1

a36b2f9c55a9c182059b06ca5f53212a1b891c22
SHA256

faf84392150ee55705028f09483dd5f3cdf0cf6dfca5b90483a6b85eb67246da
SHA512

94e946873714d69645b55c70b308d2303d074e4eb82dd6fe13b93d70e8abab0f9c8ebb6e5bc4e38998a7f8da227f5132ac2a9bcd37819c7dec506551edff6a58
SSDEEP

24576:inIHxg9+EHuf4LasbAQM+l0Dopqkao/WsKIB/95+KNoVP92rIuD4W5Jt3Ye5viWw:YZ81M5bPhqkaoL95bWVruD4q3Iet7FFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf84392150ee55705028f09483dd5f3cdf0cf6dfca5b90483a6b85eb67246da

Files

faf84392150ee55705028f09483dd5f3cdf0cf6dfca5b90483a6b85eb67246da
.exe windows:4 windows x86

820fb67d290b198a2fbccb47b4f63edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

lstrcpynA

user32

GetClipboardData

gdi32

SelectPalette

winmm

waveOutRestart

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

RegisterTypeLi

comctl32

ord17

ws2_32

WSAAsyncSelect

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 480KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 996KB - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

820fb67d290b198a2fbccb47b4f63edd

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: 480KB - Virtual size: 1.1MB

.sedata Size: 996KB - Virtual size: 996KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 480KB - Virtual size: 1.1MB

.sedata
Size: 996KB - Virtual size: 996KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB