fb302e975c591a532dce68274f3c6893495bf356267b95033c9b53f62a569a9b

Sharing

Copy URL

Twitter E-mail

General

Target

fb302e975c591a532dce68274f3c6893495bf356267b95033c9b53f62a569a9b
Size

11.7MB
MD5

7c482407d9922c3965576a6112a28893
SHA1

0462ebf257f35b4d63e7d0874c5995b8816f73ba
SHA256

fb302e975c591a532dce68274f3c6893495bf356267b95033c9b53f62a569a9b
SHA512

90b6a5a8693abdd07e37e5dc15fcd1d85307f9aba67ac0b4cdf19648fcf37a029f228510e956fb12b5a22ca328f9a91723c3d7dc5b0647298697df405117e839
SSDEEP

196608:3mJ6bF/K8vI4RqRO7GbfQuu8eMvvAkvNfBELaLi1BnRZKI4py/Sj2aguXN:U4M438dvvLvALaG1BRZLUyDand

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb302e975c591a532dce68274f3c6893495bf356267b95033c9b53f62a569a9b

Files

fb302e975c591a532dce68274f3c6893495bf356267b95033c9b53f62a569a9b
.exe windows:5 windows x86 arch:x86

2d93e36c96a666aa4e89aeb970f1bc50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExA
GetVersion
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

MessageBoxA
DrawEdge
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW

gdi32

CreateCompatibleDC
ScaleWindowExtEx

gdiplus

GdipSetTextRenderingHint

ole32

OleInitialize

imm32

ImmGetContext

shell32

ShellExecuteA
SHGetSpecialFolderPathA

shlwapi

PathFileExistsA

winmm

PlaySoundA
waveOutUnprepareHeader

ws2_32

WSAAsyncSelect

version

VerLanguageNameA

rasapi32

RasGetConnectStatusA

winspool.drv

OpenPrinterA

advapi32

OpenProcessToken

oleaut32

UnRegisterTypeLi

comctl32

ImageList_DragShowNolock

wininet

InternetCanonicalizeUrlA

comdlg32

GetFileTitleA

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 12.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AQQD0
Size: - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.AQQD1
Size: 11.3MB - Virtual size: 11.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 336KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d93e36c96a666aa4e89aeb970f1bc50

Headers

File Characteristics

Imports

kernel32

user32

gdi32

gdiplus

ole32

imm32

shell32

shlwapi

winmm

ws2_32

version

rasapi32

winspool.drv

advapi32

oleaut32

comctl32

wininet

comdlg32

wtsapi32

Sections

.text Size: - Virtual size: 3.4MB

.rdata Size: - Virtual size: 12.7MB

.data Size: - Virtual size: 799KB

.AQQD0 Size: - Virtual size: 4.9MB

.AQQD1 Size: 11.3MB - Virtual size: 11.3MB

.rsrc Size: 336KB - Virtual size: 332KB

.text
Size: - Virtual size: 3.4MB

.rdata
Size: - Virtual size: 12.7MB

.data
Size: - Virtual size: 799KB

.AQQD0
Size: - Virtual size: 4.9MB

.AQQD1
Size: 11.3MB - Virtual size: 11.3MB

.rsrc
Size: 336KB - Virtual size: 332KB