1a58832740f7c459f47c57434bbb0696e6811cf875d51e6b22a026502cfbdfd7

Sharing

Copy URL Twitter E-mail

General

Target

1a58832740f7c459f47c57434bbb0696e6811cf875d51e6b22a026502cfbdfd7
Size

3.0MB
MD5

c9d90b8dcb1ac8dfc69426b04c415684
SHA1

5bd85cfff1f4253f5182d05e8e4ad098748a16a9
SHA256

1a58832740f7c459f47c57434bbb0696e6811cf875d51e6b22a026502cfbdfd7
SHA512

0b0124a885b964828dc39826d6d46c09f5de7d16cd7f857c242c83f7a81190921d5f48af698a0031f59445a00befa8e22e61b0a93d872583875c66147a1f52c4
SSDEEP

49152:2vYjpCOCQdLzdHxI5ByzNaHjHrG3Namlhj24rQX9xe:3VCOCgXdS4zuYTS8uP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a58832740f7c459f47c57434bbb0696e6811cf875d51e6b22a026502cfbdfd7

Files

1a58832740f7c459f47c57434bbb0696e6811cf875d51e6b22a026502cfbdfd7
.dll windows:4 windows x86

1ced491263dba7e7385b153924330e46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutPrepareHeader

ws2_32

closesocket

rasapi32

RasGetConnectStatusA

kernel32

GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetScrollPos

gdi32

ExcludeClipRect

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

RegisterTypeLi

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

comdlg32

GetSaveFileNameA

Exports

Exports

CInit
CUnInit

Sections

.text
Size: 788KB - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text0
Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ced491263dba7e7385b153924330e46

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Exports

Exports

Sections

.text Size: 788KB - Virtual size: 785KB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 140KB - Virtual size: 402KB

.text0 Size: 308KB - Virtual size: 306KB

.text1 Size: 116KB - Virtual size: 114KB

.reloc Size: 48KB - Virtual size: 47KB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 788KB - Virtual size: 785KB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 140KB - Virtual size: 402KB

.text0
Size: 308KB - Virtual size: 306KB

.text1
Size: 116KB - Virtual size: 114KB

.reloc
Size: 48KB - Virtual size: 47KB

.rsrc
Size: 16KB - Virtual size: 14KB