30f681e8a1455cebb0acae52491320f6

Sharing

Copy URL Twitter E-mail

General

Target

30f681e8a1455cebb0acae52491320f6
Size

2.4MB
MD5

30f681e8a1455cebb0acae52491320f6
SHA1

a897e09417a45faa06e3a8cdab71d619ce66c34c
SHA256

ec3a99df89b42fed6fe4014dfbe33331def83da8d57dad4d961e03d7f7bbfb13
SHA512

73a643323f0a3ca9834ce1a37315d78adcf56aa22ea98cf26d28e3605c3d2201d2dad591e69319d76215f2364a41833a1ded061a0b52779a4627aebd60aec9cb
SSDEEP

49152:aPkPKJAkHC61e/s431+Qnsxz3KYNh8BoqKKsQCRdmovxkfB6XX:aPw8AkHC6w/B1Mh8BoqoNxGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f681e8a1455cebb0acae52491320f6

Files

30f681e8a1455cebb0acae52491320f6
.exe windows:5 windows x86 arch:x86

8e396f5692604ce89cd06b336073bbbd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAGetLastError

wldap32

ord60

kernel32

GetVersionExA
RaiseException
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

IntersectRect

gdi32

OffsetRgn

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegQueryValueExA

shell32

DragFinish

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA

ole32

CoRegisterMessageFilter

oleaut32

SysFreeString

oledlg

ord8

gdiplus

GdipGetImageWidth

wininet

InternetSetFilePointer

oleacc

CreateStdAccessibleObject

imm32

ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data30
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data31
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e396f5692604ce89cd06b336073bbbd

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wldap32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

wininet

oleacc

imm32

winmm

Sections

.text Size: - Virtual size: 1.5MB

.rdata Size: - Virtual size: 328KB

.data Size: - Virtual size: 57KB

.data30 Size: - Virtual size: 1.5MB

.data31 Size: 2.4MB - Virtual size: 2.4MB

.rsrc Size: 22KB - Virtual size: 21KB

.text
Size: - Virtual size: 1.5MB

.rdata
Size: - Virtual size: 328KB

.data
Size: - Virtual size: 57KB

.data30
Size: - Virtual size: 1.5MB

.data31
Size: 2.4MB - Virtual size: 2.4MB

.rsrc
Size: 22KB - Virtual size: 21KB