d54e88cc78c827d70516b747268e44215dd0fd8edb9117859625a30181311336

Sharing

Copy URL Twitter E-mail

General

Target

d54e88cc78c827d70516b747268e44215dd0fd8edb9117859625a30181311336
Size

12.8MB
MD5

632b4557c52db348da082a5c84fec19c
SHA1

835b515dcf34778b20c20ad15ea035d2dba38684
SHA256

d54e88cc78c827d70516b747268e44215dd0fd8edb9117859625a30181311336
SHA512

b6274b31fd781f8a6547cca4ff3274339579af9882d7b9aca1b496cb220c6acd897f8943ee97e36902725a75e35c5bd5a575acee89d376209a6b040cb12daf13
SSDEEP

196608:T5A201xkdMrJVrhCFBFw98Dg1abw/hGftIXJa5RBWb58c9BDalB9cYF:T5lAxr7heba7Qs5GQJafU+c9sdV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54e88cc78c827d70516b747268e44215dd0fd8edb9117859625a30181311336

Files

d54e88cc78c827d70516b747268e44215dd0fd8edb9117859625a30181311336
.exe windows:4 windows x86

5943cd8319816cfa3c1f3cf8f531adeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

inet_addr

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasGetConnectStatusA

kernel32

GetTimeZoneInformation

user32

GetSysColorBrush

gdi32

GetPolyFillMode

msimg32

GradientFill

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

SHEmptyRecycleBinA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ImageList_Create

wininet

HttpQueryInfoA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 948KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 128KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps0
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 800KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5943cd8319816cfa3c1f3cf8f531adeb

Headers

File Characteristics

Imports

winmm

ws2_32

msvfw32

avifil32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 948KB - Virtual size: 2.2MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 128KB - Virtual size: 824KB

.vmps0 Size: 5.2MB - Virtual size: 5.2MB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.sedata Size: 800KB - Virtual size: 800KB

.idata Size: 4KB - Virtual size: 4KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 948KB - Virtual size: 2.2MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 128KB - Virtual size: 824KB

.vmps0
Size: 5.2MB - Virtual size: 5.2MB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.sedata
Size: 800KB - Virtual size: 800KB

.idata
Size: 4KB - Virtual size: 4KB

.sedata
Size: 4KB - Virtual size: 4KB