59346a6982e4d2cf09eca1abd2e3afe6784426bf8f9a8d036708cc44aac66652

Sharing

Copy URL Twitter E-mail

General

Target

59346a6982e4d2cf09eca1abd2e3afe6784426bf8f9a8d036708cc44aac66652
Size

11.7MB
MD5

2fe9b45662d620e04edc9eca7478736e
SHA1

62e5e44c0009248929030d40e1db66af12efc6df
SHA256

59346a6982e4d2cf09eca1abd2e3afe6784426bf8f9a8d036708cc44aac66652
SHA512

0e1e0ef4143906bd460d38530c0c0dea28816207de6ffc01d4932172cf6bbdb4721e68e703043d2301245b1ff89af94bfb4eb6d3da6cb79f5c03da569388b370
SSDEEP

196608:28t660FrQnuzeViI19RnzaXcPN+z51dedN+iSzc9BDalEsfu2K6JlsRK87:tZ0V3e8I7lHPNUDgd8iKc9s+aJSRX7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59346a6982e4d2cf09eca1abd2e3afe6784426bf8f9a8d036708cc44aac66652

Files

59346a6982e4d2cf09eca1abd2e3afe6784426bf8f9a8d036708cc44aac66652
.exe windows:4 windows x86

bfb24b35f0112660c1011d2c1df2eeb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

rasapi32

RasHangUpA

user32

UnhookWindowsHookEx

gdi32

DeleteObject

winmm

midiStreamRestart

msimg32

GradientFill

winspool.drv

ClosePrinter

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

OleSetClipboard

oleaut32

VarDateFromStr

comctl32

ImageList_SetBkColor

ws2_32

ntohl

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

secur32

GetUserNameExA

urlmon

URLDownloadToFileW

shlwapi

StrTrimA

iphlpapi

GetAdaptersInfo

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo2
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bfb24b35f0112660c1011d2c1df2eeb5

Headers

File Characteristics

Imports

kernel32

rasapi32

user32

gdi32

winmm

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

secur32

urlmon

shlwapi

iphlpapi

Exports

Exports

Sections

.text Size: - Virtual size: 7.9MB

.mapo Size: 5.9MB - Virtual size: 5.9MB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.mapo Size: 152KB - Virtual size: 152KB

.mapo2 Size: 2.7MB - Virtual size: 2.7MB

.text
Size: - Virtual size: 7.9MB

.mapo
Size: 5.9MB - Virtual size: 5.9MB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.mapo
Size: 152KB - Virtual size: 152KB

.mapo2
Size: 2.7MB - Virtual size: 2.7MB