c93deea661a8ad5ced8c391268f19133746ea650dcebc5027d131ab0093f0f0a

Sharing

Copy URL Twitter E-mail

General

Target

c93deea661a8ad5ced8c391268f19133746ea650dcebc5027d131ab0093f0f0a
Size

10.5MB
MD5

ad9d26403ff58c9e9fe54a8019cacabf
SHA1

9c3d4282b31bf95d39901459c800fcfd316fcf04
SHA256

c93deea661a8ad5ced8c391268f19133746ea650dcebc5027d131ab0093f0f0a
SHA512

9f6e3db467a203b1e674bad4e53ee1f5d943f5757f7ebf86883c2b292ce61b4c3b425cc533ec2346ab2259760da7a4a32503304478791b843ff21f9826a2af8f
SSDEEP

196608:F1fTtUPmp4jxfjE3tWsySey7HzgD3rv3hf/mf7w/38vc9BDal:FXOjxfjHsyHy78LrvJS7w/svc9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c93deea661a8ad5ced8c391268f19133746ea650dcebc5027d131ab0093f0f0a

Files

c93deea661a8ad5ced8c391268f19133746ea650dcebc5027d131ab0093f0f0a
.exe windows:4 windows x86

e88e0f814294d7f019ae6a1c1206ad23

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

winmm

midiStreamRestart

ws2_32

gethostname

rasapi32

RasGetConnectStatusA

user32

GetSysColorBrush

gdi32

CreateSolidBrush

msimg32

GradientFill

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetUBound

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

secur32

GetUserNameExA

urlmon

URLDownloadToFileW

shlwapi

StrTrimA

iphlpapi

GetAdaptersInfo

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e88e0f814294d7f019ae6a1c1206ad23

Headers

File Characteristics

Imports

kernel32

msvfw32

avifil32

winmm

ws2_32

rasapi32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

secur32

urlmon

shlwapi

iphlpapi

Exports

Exports

Sections

.text Size: - Virtual size: 10.9MB

.mapo Size: 7.4MB - Virtual size: 7.4MB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.mapo Size: 152KB - Virtual size: 152KB

.mapo2 Size: 4KB - Virtual size: 4KB

.text
Size: - Virtual size: 10.9MB

.mapo
Size: 7.4MB - Virtual size: 7.4MB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.mapo
Size: 152KB - Virtual size: 152KB

.mapo2
Size: 4KB - Virtual size: 4KB