9889fd59fca814a36c589885f55c86d3edb1b9eb9e18e832bc0daa5d5197bc7d

Sharing

Copy URL Twitter E-mail

General

Target

9889fd59fca814a36c589885f55c86d3edb1b9eb9e18e832bc0daa5d5197bc7d
Size

12.9MB
MD5

74b094da2aa45ef65d55d7a7029d526e
SHA1

67a9333f8571edcd8a574d0b3a0bb9cef7563e52
SHA256

9889fd59fca814a36c589885f55c86d3edb1b9eb9e18e832bc0daa5d5197bc7d
SHA512

63d40b91d02dc448bfff32dfe74fe204a0d45a309bc001194b418d5f0b9206d8d2c00b7e0f7cd27d793064af4f2ea4f8ac0c2b56404e56a17aadbb40705e6d40
SSDEEP

196608:SKLorB9U1MkEunJVAudhhogssdgf5XcgS4zzLNJgzmsHmbaFkQc9BDalNfP:GrB9JUndBosdgf3zJ9vbalc9sX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9889fd59fca814a36c589885f55c86d3edb1b9eb9e18e832bc0daa5d5197bc7d

Files

9889fd59fca814a36c589885f55c86d3edb1b9eb9e18e832bc0daa5d5197bc7d
.exe windows:4 windows x86

5943cd8319816cfa3c1f3cf8f531adeb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

inet_addr

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasGetConnectStatusA

kernel32

GetTimeZoneInformation

user32

GetSysColorBrush

gdi32

GetPolyFillMode

msimg32

GradientFill

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

SHEmptyRecycleBinA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ImageList_Create

wininet

HttpQueryInfoA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 948KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 128KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps0
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 744KB - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5943cd8319816cfa3c1f3cf8f531adeb

Headers

File Characteristics

Imports

winmm

ws2_32

msvfw32

avifil32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 948KB - Virtual size: 2.3MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 128KB - Virtual size: 824KB

.vmps0 Size: 5.4MB - Virtual size: 5.4MB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.sedata Size: 744KB - Virtual size: 744KB

.idata Size: 4KB - Virtual size: 4KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 948KB - Virtual size: 2.3MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 128KB - Virtual size: 824KB

.vmps0
Size: 5.4MB - Virtual size: 5.4MB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

.sedata
Size: 744KB - Virtual size: 744KB

.idata
Size: 4KB - Virtual size: 4KB

.sedata
Size: 4KB - Virtual size: 4KB