c87b4818ab52211ae2650cbabe5bae378cce921f14937792a128c4e7c27bcfd2

Sharing

Copy URL Twitter E-mail

General

Target

c87b4818ab52211ae2650cbabe5bae378cce921f14937792a128c4e7c27bcfd2
Size

14.6MB
MD5

9a46c70731e92933272b3da55c3ce387
SHA1

3e3774d7101a6b62a92bbb554e4e920428781671
SHA256

c87b4818ab52211ae2650cbabe5bae378cce921f14937792a128c4e7c27bcfd2
SHA512

103884b6130642eeb6b8909fe8650445f7abc4cef7c2578ee592afdae8c9610c60907f0c5e68b6265a69b37bc252d9537e5b15080f230d1d797bfe7dcb034cf5
SSDEEP

196608:GCtsOiq9ZmGSZJsZRlDHVdoJEnCxlssMSRc8qMyREcwcgS19dtxz3Nd/cAAiqdW:GUXCral7HyWSRZqMawcJ19bJ3//lA7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c87b4818ab52211ae2650cbabe5bae378cce921f14937792a128c4e7c27bcfd2

Files

c87b4818ab52211ae2650cbabe5bae378cce921f14937792a128c4e7c27bcfd2
.exe windows:4 windows x86

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
RaiseException

ole32

OleUninitialize

user32

PostMessageA
AppendMenuA

atl

ord47

shell32

DragQueryFileA
ShellExecuteA

gdi32

GetDeviceCaps
LineTo

advapi32

ControlService
RegQueryValueExA

winspool.drv

ClosePrinter
ClosePrinter

comctl32

ord17
ImageList_Destroy

oledlg

ord8

oleaut32

SafeArrayUnaccessData
LoadTypeLi

shlwapi

PathFileExistsA

winmm

waveOutClose

ws2_32

inet_addr

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 6.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

25cd89e069566aa8d5a65a960c7b8922

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

winmm

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.2MB

.rdata Size: - Virtual size: 2.4MB

.data Size: - Virtual size: 467KB

.rsrc Size: 28KB - Virtual size: 24KB

.svmp1 Size: - Virtual size: 6.6MB

.svmp2 Size: 6.6MB - Virtual size: 6.6MB

.svmp3 Size: 1.9MB - Virtual size: 1.9MB

.svmp4 Size: 5.6MB - Virtual size: 5.6MB

.svmp5 Size: 12KB - Virtual size: 10KB

.svmp6 Size: 440KB - Virtual size: 439KB

.text
Size: - Virtual size: 1.2MB

.rdata
Size: - Virtual size: 2.4MB

.data
Size: - Virtual size: 467KB

.rsrc
Size: 28KB - Virtual size: 24KB

.svmp1
Size: - Virtual size: 6.6MB

.svmp2
Size: 6.6MB - Virtual size: 6.6MB

.svmp3
Size: 1.9MB - Virtual size: 1.9MB

.svmp4
Size: 5.6MB - Virtual size: 5.6MB

.svmp5
Size: 12KB - Virtual size: 10KB

.svmp6
Size: 440KB - Virtual size: 439KB