064d329383495be6829940a920af88a07682e2c7a1b0a9282347c64af05b4dd0

Sharing

Copy URL Twitter E-mail

General

Target

064d329383495be6829940a920af88a07682e2c7a1b0a9282347c64af05b4dd0
Size

14.7MB
MD5

db13d973163d370fcea1a72c6bf6af69
SHA1

f2bcb8d4938f46a13d1c647ca45a982ba40c28a8
SHA256

064d329383495be6829940a920af88a07682e2c7a1b0a9282347c64af05b4dd0
SHA512

8beb2ce1e1fbee4928840ac00933c3e191bac3126d958441ccb2b2c408e7f85527abde3c517ab853c205e4765b5fa5febfdd4b2a361603cfc3427cf582f95e1c
SSDEEP

393216:pGPP8LxYGhtCz2hPmWyc+yiABAhBKj32E:pGPECG/Rk7196j3h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
064d329383495be6829940a920af88a07682e2c7a1b0a9282347c64af05b4dd0

Files

064d329383495be6829940a920af88a07682e2c7a1b0a9282347c64af05b4dd0
.exe windows:6 windows x86

ba67d931e89496d9ad6827b4ce15d977

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime

user32

IsZoomed

gdi32

CreateRectRgn

comdlg32

GetOpenFileNameW

advapi32

CryptGetUserKey

shell32

DragFinish

ole32

CoTaskMemRealloc

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

gdiplus

GdiplusStartup

wldap32

ord46

ws2_32

bind

shlwapi

StrChrW

winmm

timeGetDevCaps

bcrypt

BCryptGenRandom

crypt32

CertCloseStore

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1023KB - Virtual size: 1022KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.co/
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jWH
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Qff
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba67d931e89496d9ad6827b4ce15d977

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

gdiplus

wldap32

ws2_32

shlwapi

winmm

bcrypt

crypt32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 1023KB - Virtual size: 1022KB

.data Size: 26KB - Virtual size: 42KB

.co/ Size: 6.5MB - Virtual size: 6.5MB

.jWH Size: 512B - Virtual size: 152B

.Qff Size: 5.1MB - Virtual size: 5.1MB

.reloc Size: 102KB - Virtual size: 102KB

.rsrc Size: 199KB - Virtual size: 198KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 1023KB - Virtual size: 1022KB

.data
Size: 26KB - Virtual size: 42KB

.co/
Size: 6.5MB - Virtual size: 6.5MB

.jWH
Size: 512B - Virtual size: 152B

.Qff
Size: 5.1MB - Virtual size: 5.1MB

.reloc
Size: 102KB - Virtual size: 102KB

.rsrc
Size: 199KB - Virtual size: 198KB