c270016d49beeb910d3f35d4f33e4bc67cd8ebbacbac411ae168a33cad195dc4

Sharing

Copy URL Twitter E-mail

General

Target

c270016d49beeb910d3f35d4f33e4bc67cd8ebbacbac411ae168a33cad195dc4
Size

11.4MB
MD5

a76adfa031861819e273264b55037166
SHA1

67204124e95d1a208a7606f4a938b3d1e7c51461
SHA256

c270016d49beeb910d3f35d4f33e4bc67cd8ebbacbac411ae168a33cad195dc4
SHA512

06327d836fc3b242b18afab14038f06da29262a3930dd3b85c2c82bbaf8d2ed511ec6a2e0f48e61706af2ab7c237d5395c22eaaf07c8883e3ff84fe0c60deec2
SSDEEP

196608:5v4MpQb+K3JsennGE8KIlLmGqzvq7O4fKKi6zEKTAMbL00Yt3gNpp:GDGenGE8hxmB9PKiKVAC00YVIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c270016d49beeb910d3f35d4f33e4bc67cd8ebbacbac411ae168a33cad195dc4

Files

c270016d49beeb910d3f35d4f33e4bc67cd8ebbacbac411ae168a33cad195dc4
.exe windows:4 windows x86

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
RaiseException

ole32

OleUninitialize

user32

PostMessageA
AppendMenuA

atl

ord47

shell32

DragQueryFileA
ShellExecuteA

gdi32

GetDeviceCaps
LineTo

advapi32

ControlService
RegQueryValueExA

winspool.drv

ClosePrinter
ClosePrinter

comctl32

ord17
ImageList_Destroy

oledlg

ord8

oleaut32

SafeArrayUnaccessData
LoadTypeLi

shlwapi

PathFileExistsA

winmm

waveOutClose

ws2_32

inet_addr

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 6.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 412KB - Virtual size: 410KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

winmm

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 1.2MB

.data Size: - Virtual size: 466KB

.rsrc Size: 28KB - Virtual size: 24KB

.svmp1 Size: - Virtual size: 6.4MB

.svmp2 Size: 6.2MB - Virtual size: 6.2MB

.svmp3 Size: 1.8MB - Virtual size: 1.8MB

.svmp4 Size: 6.0MB - Virtual size: 6.0MB

.svmp5 Size: 16KB - Virtual size: 14KB

.svmp6 Size: 412KB - Virtual size: 410KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 1.2MB

.data
Size: - Virtual size: 466KB

.rsrc
Size: 28KB - Virtual size: 24KB

.svmp1
Size: - Virtual size: 6.4MB

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

.svmp3
Size: 1.8MB - Virtual size: 1.8MB

.svmp4
Size: 6.0MB - Virtual size: 6.0MB

.svmp5
Size: 16KB - Virtual size: 14KB

.svmp6
Size: 412KB - Virtual size: 410KB