f9a7ac06df6c9e7ff2b2e1f76d08a1937e85ff54d8062a6afb74b9b93fad7d83

Sharing

Copy URL Twitter E-mail

General

Target

f9a7ac06df6c9e7ff2b2e1f76d08a1937e85ff54d8062a6afb74b9b93fad7d83
Size

12.7MB
MD5

f4e9a3cb7f2af6781c8fa2d6f6a8e8c1
SHA1

27ea705a55bf4f8d954ba9a1c9ce4ec097de4a1b
SHA256

f9a7ac06df6c9e7ff2b2e1f76d08a1937e85ff54d8062a6afb74b9b93fad7d83
SHA512

a4953d863e94203d38016f66522061db22225a6de5e6df39118e573600d9c97a43ebf045a90229eef4e8b166c1451bee4befa318243ea8fb2da47a97c74f689b
SSDEEP

196608:5v4MpQb+K3JsennGE8KIlLmGqzvq7O4fKKi6zEKTAMbL00Yt3gNpF93hY:GDGenGE8hxmB9PKiKVAC00YVIFFhY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9a7ac06df6c9e7ff2b2e1f76d08a1937e85ff54d8062a6afb74b9b93fad7d83

Files

f9a7ac06df6c9e7ff2b2e1f76d08a1937e85ff54d8062a6afb74b9b93fad7d83
.exe windows:4 windows x86

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
RaiseException

ole32

OleUninitialize

user32

PostMessageA
AppendMenuA

atl

ord47

shell32

DragQueryFileA
ShellExecuteA

gdi32

GetDeviceCaps
LineTo

advapi32

ControlService
RegQueryValueExA

winspool.drv

ClosePrinter
ClosePrinter

comctl32

ord17
ImageList_Destroy

oledlg

ord8

oleaut32

SafeArrayUnaccessData
LoadTypeLi

shlwapi

PathFileExistsA

winmm

waveOutClose

ws2_32

inet_addr

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 6.4MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 412KB - Virtual size: 410KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

winmm

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 1.2MB

.data Size: - Virtual size: 466KB

.rsrc Size: 28KB - Virtual size: 24KB

.svmp1 Size: - Virtual size: 6.4MB

.svmp2 Size: 6.2MB - Virtual size: 6.2MB

.svmp3 Size: 1.8MB - Virtual size: 1.8MB

.svmp4 Size: 6.0MB - Virtual size: 6.0MB

.svmp5 Size: 16KB - Virtual size: 14KB

.svmp6 Size: 412KB - Virtual size: 410KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 1.2MB

.data
Size: - Virtual size: 466KB

.rsrc
Size: 28KB - Virtual size: 24KB

.svmp1
Size: - Virtual size: 6.4MB

.svmp2
Size: 6.2MB - Virtual size: 6.2MB

.svmp3
Size: 1.8MB - Virtual size: 1.8MB

.svmp4
Size: 6.0MB - Virtual size: 6.0MB

.svmp5
Size: 16KB - Virtual size: 14KB

.svmp6
Size: 412KB - Virtual size: 410KB