7159229a0e4c0c0f7bc737a4461118221a16e767dfd022f08780eb2bbab4f44e

Sharing

Copy URL Twitter E-mail

General

Target

7159229a0e4c0c0f7bc737a4461118221a16e767dfd022f08780eb2bbab4f44e
Size

8.1MB
MD5

96a2ece5e7b61da8c488203204fe2483
SHA1

3423655d692e188ff6854de1b5e4f4b5e2de501b
SHA256

7159229a0e4c0c0f7bc737a4461118221a16e767dfd022f08780eb2bbab4f44e
SHA512

ae2d60e398af223df3174d016a318a96c41bfbb7710b1671deb04845306eefedec4a8540f632a2356703b92fcfcefe4199b8c33f8cff9db561737d000a489cfa
SSDEEP

196608:y4HKDQBKkXy+X9t815j5tDobSUFQj7R5Zj25JJ1ay0cjZGr3nrEn:yaK0BK+Yvj5t0ZFQj7V22f7rG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7159229a0e4c0c0f7bc737a4461118221a16e767dfd022f08780eb2bbab4f44e

Files

7159229a0e4c0c0f7bc737a4461118221a16e767dfd022f08780eb2bbab4f44e
.exe windows:5 windows x86 arch:x86

f6ad159643995c50f7da2c47438af8e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shlwapi

PathFileExistsA

ws2_32

inet_ntoa

wininet

InternetOpenA

winhttp

WinHttpOpen

oledlg

ord8

icmp

IcmpSendEcho

winspool.drv

OpenPrinterA

Sections

.text
Size: 3.9MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hero
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6ad159643995c50f7da2c47438af8e0

Headers

File Characteristics

Imports

kernel32

oleaut32

advapi32

user32

gdi32

version

mpr

ole32

comctl32

shell32

comdlg32

wsock32

gdiplus

msvcrt

iphlpapi

psapi

shlwapi

ws2_32

wininet

winhttp

oledlg

icmp

winspool.drv

Sections

.text Size: 3.9MB - Virtual size: 8.7MB

.rsrc Size: 15KB - Virtual size: 16KB

.hero Size: 512B - Virtual size: 16KB

.text Size: - Virtual size: 5.0MB

.hero Size: 1.9MB - Virtual size: 1.9MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 4KB

.hero Size: 4KB - Virtual size: 4KB

.text
Size: 3.9MB - Virtual size: 8.7MB

.rsrc
Size: 15KB - Virtual size: 16KB

.hero
Size: 512B - Virtual size: 16KB

.text
Size: - Virtual size: 5.0MB

.hero
Size: 1.9MB - Virtual size: 1.9MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.hero
Size: 4KB - Virtual size: 4KB