d052e8a3a19d4107af0ad160cc0a431c500a25bbbb4e88377ed1aaa169882a0d

Sharing

Copy URL Twitter E-mail

General

Target

d052e8a3a19d4107af0ad160cc0a431c500a25bbbb4e88377ed1aaa169882a0d
Size

15.3MB
MD5

53cf9e22f98069d7b0587c7a84f38e33
SHA1

1b46f49bd0c0d5dadbb6147a91ffc8a5cba63905
SHA256

d052e8a3a19d4107af0ad160cc0a431c500a25bbbb4e88377ed1aaa169882a0d
SHA512

3e8034b42ae0851dcb6ba1236781c7b4504d06fa95a4a55cc8fd785dffa923d7ebda953a5f40444480124769d6bccf3a3fb5253cc39a5c6d67413134ca0b3d33
SSDEEP

393216:MMOksWGp2xeUIEOI1hxuevRGrcdDUnD82iC1o:M39bfmt94nr1o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d052e8a3a19d4107af0ad160cc0a431c500a25bbbb4e88377ed1aaa169882a0d

Files

d052e8a3a19d4107af0ad160cc0a431c500a25bbbb4e88377ed1aaa169882a0d
.exe windows:5 windows x86

31f18f11e79612efcb441e90d76c9103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DefWindowProcA

gdi32

LineTo

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

DragQueryFileA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Add

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps0
Size: - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmps1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps2
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31f18f11e79612efcb441e90d76c9103

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 168KB

.data Size: - Virtual size: 281KB

.vmps0 Size: - Virtual size: 9.2MB

.vmps1 Size: 4KB - Virtual size: 2KB

.vmps2 Size: 15.3MB - Virtual size: 15.3MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 168KB

.data
Size: - Virtual size: 281KB

.vmps0
Size: - Virtual size: 9.2MB

.vmps1
Size: 4KB - Virtual size: 2KB

.vmps2
Size: 15.3MB - Virtual size: 15.3MB

.rsrc
Size: 8KB - Virtual size: 6KB