6378c2d6eaf994bf7a089f9980dbc44266e44426f827bf1f5d1415794ba33803

Sharing

Copy URL Twitter E-mail

General

Target

6378c2d6eaf994bf7a089f9980dbc44266e44426f827bf1f5d1415794ba33803
Size

2.0MB
MD5

51e2a7a421bb18a18b46f540b8df41ac
SHA1

c78677e7dce1f9e854cc7f4ba6ce288253b0a4ae
SHA256

6378c2d6eaf994bf7a089f9980dbc44266e44426f827bf1f5d1415794ba33803
SHA512

8520351a0984daf0437fd7103fa79a296172beee62d93914f37e309a5102e7c77e520b463f713eb8c451153c3adf709c898755c5c76c224f1db7e1fd7f816457
SSDEEP

49152:EVv3EdVm7dUSclC/Oa7lJHWZ/gNkky/cTh:IEd6wCXHHsSkky/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6378c2d6eaf994bf7a089f9980dbc44266e44426f827bf1f5d1415794ba33803

Files

6378c2d6eaf994bf7a089f9980dbc44266e44426f827bf1f5d1415794ba33803
.dll windows:4 windows x86

c20e7fa98a96c41df49c88997e42a9f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

rasapi32

RasHangUpA

winmm

waveOutOpen

ws2_32

setsockopt

kernel32

SetEvent
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetPropA

gdi32

RealizePalette

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

DragFinish

ole32

CoCreateInstance

oleaut32

SafeArrayGetDim

comctl32

ImageList_DragEnter

wininet

InternetOpenA

comdlg32

GetOpenFileNameA

Exports

Exports

Hello

Sections

.text
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp2
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c20e7fa98a96c41df49c88997e42a9f8

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 840KB

.rdata Size: - Virtual size: 540KB

.data Size: - Virtual size: 300KB

.vmp0 Size: - Virtual size: 24KB

.reloc Size: - Virtual size: 104KB

.sedata Size: - Virtual size: 520KB

.idata Size: - Virtual size: 12KB

.vmp1 Size: - Virtual size: 840KB

.vmp2 Size: 2.0MB - Virtual size: 2.0MB

.reloc Size: 4KB - Virtual size: 172B

.rsrc Size: 8KB - Virtual size: 22KB

.text
Size: - Virtual size: 840KB

.rdata
Size: - Virtual size: 540KB

.data
Size: - Virtual size: 300KB

.vmp0
Size: - Virtual size: 24KB

.reloc
Size: - Virtual size: 104KB

.sedata
Size: - Virtual size: 520KB

.idata
Size: - Virtual size: 12KB

.vmp1
Size: - Virtual size: 840KB

.vmp2
Size: 2.0MB - Virtual size: 2.0MB

.reloc
Size: 4KB - Virtual size: 172B

.rsrc
Size: 8KB - Virtual size: 22KB