e42b4feca157289ad4658bfbdc7464125066508781d22764584c90684ccf1716

Sharing

Copy URL Twitter E-mail

General

Target

e42b4feca157289ad4658bfbdc7464125066508781d22764584c90684ccf1716
Size

1.4MB
MD5

eb94c544339dd8c26e2598500975c57a
SHA1

4a2f1e454acfda574d759c809bd5f35d7c44e937
SHA256

e42b4feca157289ad4658bfbdc7464125066508781d22764584c90684ccf1716
SHA512

c208fa053f78073fefdb3ab7258ab20d1ec1854faf24837aa3264cec8d8b992309797f85beaca5438a8aeb3c941e11c6fbb2cb87b1fe45c781d3af9e120c994f
SSDEEP

24576:XTV0oSTCE2hsQKaOnvolkywNiQxy02f029z+iOj8Oq8wflrCfEBRZ23mqPfKWJu6:jV0WE221PHxy+29z+i58w6EvEWaftb1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e42b4feca157289ad4658bfbdc7464125066508781d22764584c90684ccf1716

Files

e42b4feca157289ad4658bfbdc7464125066508781d22764584c90684ccf1716
.exe windows:5 windows x86

ae4a3126e12f6cd6b6a958fdcaa38b20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

GlobalFindAtomA

user32

GetCursorPos

gdi32

DeleteObject

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

VariantClear

comctl32

ord17

ws2_32

WSAAsyncSelect

wininet

HttpOpenRequestA

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 472KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 974KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae4a3126e12f6cd6b6a958fdcaa38b20

Headers

DLL Characteristics

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: 472KB - Virtual size: 1.2MB

.sedata Size: 974KB - Virtual size: 976KB

.idata Size: 1024B - Virtual size: 4KB

.rsrc Size: 25KB - Virtual size: 28KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 472KB - Virtual size: 1.2MB

.sedata
Size: 974KB - Virtual size: 976KB

.idata
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 25KB - Virtual size: 28KB

.sedata
Size: 4KB - Virtual size: 4KB