372c423756e0c2ebf7d3cfcfec50e6c28b722aeb8351167b0b4d438c506ed974

Sharing

Copy URL Twitter E-mail

General

Target

372c423756e0c2ebf7d3cfcfec50e6c28b722aeb8351167b0b4d438c506ed974
Size

9.8MB
MD5

624dcf6609bf4ce3611b2504b5f3cc90
SHA1

a43765d00226dd2e2554a3ed3dc13b4c5aacba84
SHA256

372c423756e0c2ebf7d3cfcfec50e6c28b722aeb8351167b0b4d438c506ed974
SHA512

79ee471f5803da8d12afac2c5575a253a68c89940713fa5a920214217bf605bcd35286216048f2335cdb32d1d291e425700c270663e35a0268bf095ee892fd83
SSDEEP

196608:OxQukpMdg7KwLmx5wOHCfnUvD7qujjS/boFO4acuMsTxrGc6PKaV4Ea9:3pMdg7O5FInUvquvS/sF/aRMsTxrGXP4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
372c423756e0c2ebf7d3cfcfec50e6c28b722aeb8351167b0b4d438c506ed974

Files

372c423756e0c2ebf7d3cfcfec50e6c28b722aeb8351167b0b4d438c506ed974
.exe windows:5 windows x86

bb5b30a7585517777d7efb70d1b3b49e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

OpenClipboard

gdi32

GetClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

ioctlsocket

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 498KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.A9P
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rWC
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.u1+
Size: 9.8MB - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb5b30a7585517777d7efb70d1b3b49e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 498KB

.rdata Size: - Virtual size: 77KB

.data Size: - Virtual size: 134KB

.A9P Size: - Virtual size: 5.5MB

.rWC Size: 4KB - Virtual size: 2KB

.u1+ Size: 9.8MB - Virtual size: 9.8MB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: - Virtual size: 498KB

.rdata
Size: - Virtual size: 77KB

.data
Size: - Virtual size: 134KB

.A9P
Size: - Virtual size: 5.5MB

.rWC
Size: 4KB - Virtual size: 2KB

.u1+
Size: 9.8MB - Virtual size: 9.8MB

.rsrc
Size: 8KB - Virtual size: 5KB