e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176

Sharing

Copy URL

Twitter E-mail

General

Target

e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176
Size

14.3MB
MD5

ef5937cb476066ddc182be91b7ebd6eb
SHA1

1acdd03e77d96140b3ad7d8ac65d0acd4687e49e
SHA256

e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176
SHA512

d9691322d9494fbf04f48868c236ab4ea48ebb87d937b582399b4a98dbd12418c2dfef8795452f22dbc59a07aa5ccccb4f72e7c388a0b6e4d7e147299b571acf
SSDEEP

196608:aHzjrnOnuyS8Tc6brVsj7ZGetXRioEcSSjWxCk4QWWPJ2efTw4LP8ZF0yJKMqPGZ:0GuX6brVcbXEFSjWxp489fwf0W/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176

Files

e9f5716b636e4eb607d09da38915f4a22cbb4a0a8db4add4f19979121d618176
.exe windows:5 windows x86

1b1c776fb57c7513ef3b6c496528da23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetForegroundWindow

gdi32

Escape

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetUBound

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YDun0
Size: - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.YDun1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YDun2
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b1c776fb57c7513ef3b6c496528da23

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 759KB

.rdata Size: - Virtual size: 676KB

.data Size: - Virtual size: 227KB

.YDun0 Size: - Virtual size: 9.3MB

.YDun1 Size: 4KB - Virtual size: 2KB

.YDun2 Size: 14.3MB - Virtual size: 14.3MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 759KB

.rdata
Size: - Virtual size: 676KB

.data
Size: - Virtual size: 227KB

.YDun0
Size: - Virtual size: 9.3MB

.YDun1
Size: 4KB - Virtual size: 2KB

.YDun2
Size: 14.3MB - Virtual size: 14.3MB

.rsrc
Size: 8KB - Virtual size: 6KB