94ef4e82bf0804be87c05adfe7b5d6fad044edb38e5750db4c9fb3c1225da7c3

Sharing

Copy URL Twitter E-mail

General

Target

94ef4e82bf0804be87c05adfe7b5d6fad044edb38e5750db4c9fb3c1225da7c3
Size

13.8MB
MD5

2b584d81464c279d6573179ab826e652
SHA1

83e8f39e33eaea73ee4fa0c87ce289d90922af8b
SHA256

94ef4e82bf0804be87c05adfe7b5d6fad044edb38e5750db4c9fb3c1225da7c3
SHA512

aa384389cf1703e00d40813b3d281675413cd0966d1dfd69d995974a43d58cc6b696c472f4aaa2005033950529c77624eabbe4b6746d240d07b1b77003bdf6e6
SSDEEP

196608:ttRcVuG9GLkIgWVbrZvpFwW2c5JKpdqC7MRPOZe0zkD/WDKGdJT4cYM2jWwsUZJy:tVWB1Gv7J58n57M3D/7jM2jWwsiJy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94ef4e82bf0804be87c05adfe7b5d6fad044edb38e5750db4c9fb3c1225da7c3

Files

94ef4e82bf0804be87c05adfe7b5d6fad044edb38e5750db4c9fb3c1225da7c3
.exe windows:4 windows x86 arch:x86

fb492c8f815e66c50804ee4b66976f3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

rasapi32

RasHangUpA

kernel32

GetWindowsDirectoryA

user32

GetKeyState

gdi32

LineTo

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetIcon

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 514KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 4.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 416KB - Virtual size: 412KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fb492c8f815e66c50804ee4b66976f3c

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 1.3MB

.data Size: - Virtual size: 514KB

.rsrc Size: 32KB - Virtual size: 29KB

.svmp1 Size: - Virtual size: 4.1MB

.svmp2 Size: 5.0MB - Virtual size: 5.0MB

.svmp3 Size: 2.5MB - Virtual size: 2.5MB

.svmp4 Size: 5.8MB - Virtual size: 5.8MB

.svmp5 Size: 12KB - Virtual size: 10KB

.svmp6 Size: 416KB - Virtual size: 412KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 1.3MB

.data
Size: - Virtual size: 514KB

.rsrc
Size: 32KB - Virtual size: 29KB

.svmp1
Size: - Virtual size: 4.1MB

.svmp2
Size: 5.0MB - Virtual size: 5.0MB

.svmp3
Size: 2.5MB - Virtual size: 2.5MB

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

.svmp5
Size: 12KB - Virtual size: 10KB

.svmp6
Size: 416KB - Virtual size: 412KB