4f21ab1bbd4adadfa0bb34b4cf4e4ba197b65cc372f4f9b8d6a0a58a506598eb

Sharing

Copy URL

Twitter E-mail

General

Target

4f21ab1bbd4adadfa0bb34b4cf4e4ba197b65cc372f4f9b8d6a0a58a506598eb
Size

14.5MB
MD5

7aaf181666b84d6ffabe37ba44a65701
SHA1

a0e4837115d30e312f376b2c343971ee6d0056f2
SHA256

4f21ab1bbd4adadfa0bb34b4cf4e4ba197b65cc372f4f9b8d6a0a58a506598eb
SHA512

4b897b827ae2bae6bc199ff129d02e5c27183d14b5f35bf6aabd1921ea242059035e2dc83029bcc8016a7b289dc53a97c21b9792bc5defd3cfc98b39e9d983dd
SSDEEP

393216:A+tpUyKfGSJKhKkbfxRsn57My9BK5cu+0nnOQJ+jF:A+My6TJVkDDsn5je5XJOQUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f21ab1bbd4adadfa0bb34b4cf4e4ba197b65cc372f4f9b8d6a0a58a506598eb

Files

4f21ab1bbd4adadfa0bb34b4cf4e4ba197b65cc372f4f9b8d6a0a58a506598eb
.exe windows:4 windows x86 arch:x86

6243b1774ad076ac5ed41ebb11fbae69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException

user32

GetForegroundWindow

gdi32

Escape

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 6.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.3MB - Virtual size: 6.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 440KB - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6243b1774ad076ac5ed41ebb11fbae69

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 531KB

.rdata Size: - Virtual size: 1.3MB

.data Size: - Virtual size: 218KB

.rsrc Size: 24KB - Virtual size: 23KB

.svmp1 Size: - Virtual size: 6.1MB

.svmp2 Size: 6.3MB - Virtual size: 6.3MB

.svmp3 Size: 2.5MB - Virtual size: 2.5MB

.svmp4 Size: 5.2MB - Virtual size: 5.2MB

.svmp5 Size: 12KB - Virtual size: 11KB

.svmp6 Size: 440KB - Virtual size: 436KB

.text
Size: - Virtual size: 531KB

.rdata
Size: - Virtual size: 1.3MB

.data
Size: - Virtual size: 218KB

.rsrc
Size: 24KB - Virtual size: 23KB

.svmp1
Size: - Virtual size: 6.1MB

.svmp2
Size: 6.3MB - Virtual size: 6.3MB

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

.svmp4
Size: 5.2MB - Virtual size: 5.2MB

.svmp5
Size: 12KB - Virtual size: 11KB

.svmp6
Size: 440KB - Virtual size: 436KB