669d68d66dd52363201d9482deafa7024b92063ca89b0e2a9d42f44a1b407ff7

Sharing

Copy URL Twitter E-mail

General

Target

669d68d66dd52363201d9482deafa7024b92063ca89b0e2a9d42f44a1b407ff7
Size

2.5MB
MD5

93a26309710f18287f329dc73a3435b8
SHA1

60545827f506740d973b0c487be8a5a1985c2935
SHA256

669d68d66dd52363201d9482deafa7024b92063ca89b0e2a9d42f44a1b407ff7
SHA512

b4a468fd8db4fa446271f46f4908e56b6f16d7cb2df4cd83052b0769189cbf0b455dff3de2cb14f0d0776163a324e2c537a38267caf286ad3af8b05cc638b4f2
SSDEEP

49152:RWk2r+4KJtNA7OmqFmnd4y+O6CS3pgs5NBWE7XTIAXc946Su:8VrsNA7OmFOy+COgszBtXLXc90u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
669d68d66dd52363201d9482deafa7024b92063ca89b0e2a9d42f44a1b407ff7

Files

669d68d66dd52363201d9482deafa7024b92063ca89b0e2a9d42f44a1b407ff7
.exe windows:4 windows x86 arch:x86

69593a4c7a11e8bf77b0e94adb892c1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

winmm

waveOutReset

ws2_32

accept

aquarius2

?ExecuteJavaScriptEx@ProxyFrame@@QAE?AV?$shrewd_ptr@VProxyValue@@@prime@@PBD0HPAPAD@Z

kernel32

VirtualProtect

user32

GetWindowTextLengthA

gdi32

GetStockObject

winspool.drv

DocumentPropertiesA

comdlg32

GetSaveFileNameA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

LoadTypeLi

comctl32

ImageList_DragMove

oledlg

ord8

wininet

FindFirstUrlCacheEntryA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.1MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69593a4c7a11e8bf77b0e94adb892c1d

Headers

File Characteristics

Imports

msvfw32

avifil32

winmm

ws2_32

aquarius2

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.1MB - Virtual size: 2.6MB

.sedata Size: 1.2MB - Virtual size: 1.2MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 268KB - Virtual size: 268KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.1MB - Virtual size: 2.6MB

.sedata
Size: 1.2MB - Virtual size: 1.2MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 268KB - Virtual size: 268KB

.sedata
Size: 4KB - Virtual size: 4KB