908a4dfef088b5e8df632b83b8cbb62cf01f777d5b517d758b385d038f8c562f

Sharing

Copy URL Twitter E-mail

General

Target

908a4dfef088b5e8df632b83b8cbb62cf01f777d5b517d758b385d038f8c562f
Size

14.6MB
MD5

50fb855937645f4468c6d73dbe210675
SHA1

2a04468f203d3a4e690b21d5fdea31b3255c1c43
SHA256

908a4dfef088b5e8df632b83b8cbb62cf01f777d5b517d758b385d038f8c562f
SHA512

f8aa7db1c4268434ec084b5f932847afffb1fa8a7ceebb52db0c146c20d77af6b384d4b0259ba4f98a5595fbfba7c72b846235e16fb26438a612ebe9dfce0feb
SSDEEP

393216:JZFQ6KDcAZvtIya+dn2dhW7PbCGjHTtFR:JZFcDc4vtAzdhkPbfz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
908a4dfef088b5e8df632b83b8cbb62cf01f777d5b517d758b385d038f8c562f

Files

908a4dfef088b5e8df632b83b8cbb62cf01f777d5b517d758b385d038f8c562f
.exe windows:6 windows x86

99817c5c03f6eb75c274bbb37b0ec7ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
CloseHandle
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CompareStringW

utilities

?GetBuffer@?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAEPADH@Z

soui

?TranslateText@STrText@SOUI@@QAEXXZ

version

GetFileVersionInfoSizeW

shell32

SHGetPathFromIDListW

gdi32

CreateDCW

rpcrt4

UuidToStringA

user32

SetPropW

comdlg32

GetSaveFileNameW

advapi32

OpenProcessToken

ole32

OleInitialize

oleaut32

SysAllocStringByteLen

crypt32

CryptDecodeObject

shlwapi

PathIsDirectoryW

ws2_32

WSAAddressToStringW

iphlpapi

GetIfTable

dnsapi

DnsQueryConfig

netapi32

Netbios

wininet

InternetSetOptionW

msimg32

AlphaBlend

Sections

.text
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99817c5c03f6eb75c274bbb37b0ec7ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

utilities

soui

version

shell32

gdi32

rpcrt4

user32

comdlg32

advapi32

ole32

oleaut32

crypt32

shlwapi

ws2_32

iphlpapi

dnsapi

netapi32

wininet

msimg32

Sections

.text Size: - Virtual size: 2.5MB

.rdata Size: - Virtual size: 560KB

.data Size: - Virtual size: 62KB

.gfids Size: - Virtual size: 5KB

.tls Size: 512B - Virtual size: 9B

.vdata Size: - Virtual size: 4.4MB

.text Size: - Virtual size: 5.6MB

.data Size: - Virtual size: 83KB

Size: 30KB - Virtual size: 30KB

.reloc Size: 512B - Virtual size: 328B

.rsrc Size: 4.4MB - Virtual size: 4.4MB

.text
Size: - Virtual size: 2.5MB

.rdata
Size: - Virtual size: 560KB

.data
Size: - Virtual size: 62KB

.gfids
Size: - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 9B

.vdata
Size: - Virtual size: 4.4MB

.text
Size: - Virtual size: 5.6MB

.data
Size: - Virtual size: 83KB

.reloc
Size: 512B - Virtual size: 328B

.rsrc
Size: 4.4MB - Virtual size: 4.4MB