c269614449077cb05a3bf22786ea7b5d31627fe101bf6bfe013c862466029a7f

Sharing

Copy URL Twitter E-mail

General

Target

c269614449077cb05a3bf22786ea7b5d31627fe101bf6bfe013c862466029a7f
Size

13.1MB
MD5

bd1387559da48fd83b1bbdfbedbb7c9f
SHA1

28788882571fdcc562236a1ad2227882eaa24b56
SHA256

c269614449077cb05a3bf22786ea7b5d31627fe101bf6bfe013c862466029a7f
SHA512

4378f9b9c2f1a9e2f1ed88e012bc2667046768827f365c69d46050955df14c5fd6176f232a86670bdc84ad617d31a2e19e3278db91c1de76fc2c97200e3fa158
SSDEEP

196608:9cSkOsyPUQzs9/gPlDQMSLDnWtHtJiWX59AfDUrSk4LL1sRaAbmLTN/NRXQH:9cSPdPlxSfiJiWMZhVsRalLTNvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c269614449077cb05a3bf22786ea7b5d31627fe101bf6bfe013c862466029a7f

Files

c269614449077cb05a3bf22786ea7b5d31627fe101bf6bfe013c862466029a7f
.exe windows:5 windows x86

2938403cc172ca69dd723cf6ba1ed974

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetClipboardData

gdi32

SetViewportExtEx

winmm

midiStreamClose

winspool.drv

DocumentPropertiesA

advapi32

SetSecurityDescriptorDacl

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

accept

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.b+Ph}ly
Size: - Virtual size: 9.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.c+|A3]f
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.L.RAdH$
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2938403cc172ca69dd723cf6ba1ed974

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 3.4MB

.data Size: - Virtual size: 202KB

.b+Ph}ly Size: - Virtual size: 9.0MB

.c+|A3]f Size: 4KB - Virtual size: 2KB

.L.RAdH$ Size: 13.1MB - Virtual size: 13.1MB

.rsrc Size: 4KB - Virtual size: 478B

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 3.4MB

.data
Size: - Virtual size: 202KB

.b+Ph}ly
Size: - Virtual size: 9.0MB

.c+|A3]f
Size: 4KB - Virtual size: 2KB

.L.RAdH$
Size: 13.1MB - Virtual size: 13.1MB

.rsrc
Size: 4KB - Virtual size: 478B