d39db7946d3cb4c28dcf93a88f61b47b56be9551702d24a8f1f6568ed1ababe3

Sharing

Copy URL Twitter E-mail

General

Target

d39db7946d3cb4c28dcf93a88f61b47b56be9551702d24a8f1f6568ed1ababe3
Size

3.4MB
MD5

8bffbcde2421dcb26d7da92e62e90a17
SHA1

740105ba78ab5968f7ea9ae03f33bf97498d1ba0
SHA256

d39db7946d3cb4c28dcf93a88f61b47b56be9551702d24a8f1f6568ed1ababe3
SHA512

ff83d165cb7f0ce3be7d637ae39ec69e1ee7680b6307e23408acdbb49036ef38253281051effae8ebf35b630a8631227dfb9c374704d119ee5d0a34e3154e6af
SSDEEP

98304:z8rRsauIEgWVBpITDqxKWg5ONJ/oBjY5lj:z3BgWVHITDi77FiYfj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d39db7946d3cb4c28dcf93a88f61b47b56be9551702d24a8f1f6568ed1ababe3

Files

d39db7946d3cb4c28dcf93a88f61b47b56be9551702d24a8f1f6568ed1ababe3
.dll windows:4 windows x86 arch:x86

3b13e9a587458a905ae0356380c16b6f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comdlg32

GetSaveFileNameA

comctl32

ImageList_Destroy

oleaut32

VariantClear

ole32

CLSIDFromProgID

shell32

ShellExecuteA

advapi32

RegCreateKeyExA

winspool.drv

ClosePrinter

gdi32

SetROP2

user32

ScrollWindowEx

kernel32

GlobalUnlock

ws2_32

connect

winmm

waveOutGetNumDevs

Sections

.text
Size: - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 921KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b13e9a587458a905ae0356380c16b6f

Headers

File Characteristics

Imports

comdlg32

comctl32

oleaut32

ole32

shell32

advapi32

winspool.drv

gdi32

user32

kernel32

ws2_32

winmm

Sections

.text Size: - Virtual size: 946KB

.rdata Size: - Virtual size: 3.1MB

.data Size: - Virtual size: 326KB

.vdata Size: - Virtual size: 24KB

.text Size: - Virtual size: 710KB

.data Size: - Virtual size: 921KB

.text Size: 3.4MB - Virtual size: 3.4MB

.data Size: 4KB - Virtual size: 720B

.reloc Size: 4KB - Virtual size: 872B

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: - Virtual size: 946KB

.rdata
Size: - Virtual size: 3.1MB

.data
Size: - Virtual size: 326KB

.vdata
Size: - Virtual size: 24KB

.text
Size: - Virtual size: 710KB

.data
Size: - Virtual size: 921KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.data
Size: 4KB - Virtual size: 720B

.reloc
Size: 4KB - Virtual size: 872B

.rsrc
Size: 24KB - Virtual size: 22KB