b4438a3f2b6d527028ede20663e4977fd2c03f81b193a4bea1364dabe3f20ff0

Sharing

Copy URL

Twitter E-mail

General

Target

b4438a3f2b6d527028ede20663e4977fd2c03f81b193a4bea1364dabe3f20ff0
Size

3.3MB
MD5

a9409c4c431fd71a34f6d434e305ccfd
SHA1

f79e3fee5c99c711d24d5ebc6d7c4b42dd7a021f
SHA256

b4438a3f2b6d527028ede20663e4977fd2c03f81b193a4bea1364dabe3f20ff0
SHA512

f97202789d4c2fd4f9b0fb339ff541e4582226edc4abab27f76646a1f08453d53283b7e83591e0bad751deebafd11203f7c9acd2405e4e1668fadfb539e973e8
SSDEEP

49152:5Qv9piQuUbQ3XukO00Q7Z7NRh9WBmQkpRNQJBzYNhQQwq8WdQjM+e9VDy:nPuwFZRk90NsqBhZy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4438a3f2b6d527028ede20663e4977fd2c03f81b193a4bea1364dabe3f20ff0

Files

b4438a3f2b6d527028ede20663e4977fd2c03f81b193a4bea1364dabe3f20ff0
.exe windows:4 windows x86 arch:x86

8498b5023c5209dec3cf1668e3c155cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetModuleHandleA
GetLastError
GetProcAddress
GetStartupInfoA
GetTickCount
GetTimeZoneInformation
GetLocalTime
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCommandLineA

user32

EnumChildWindows
FillRect
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetFocus
GetKeyboardState
GetMenu
GetMenuItemID
GetMenuStringW
GetMessageW
GetParent
GetPropW
GetScrollInfo
GetSubMenu
DefWindowProcW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsDialogMessageW
IsIconic
IsWindowEnabled
IsZoomed
LoadAcceleratorsW
LoadCursorW
LoadIconW
EndPaint
MessageBoxW
ModifyMenuW
PeekMessageW
PostThreadMessageW
RedrawWindow
RegisterClassW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageW
SetCapture
SetCursor
SetFocus
SetPropW
SetScrollInfo
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
ToUnicode
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
WindowFromPoint
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
ClientToScreen
CheckMenuItem
EnableWindow
EnableMenuItem
DrawMenuBar
DispatchMessageW
LoadImageW
DestroyMenu
CallWindowProcW
BeginPaint
AppendMenuW
MessageBoxA
GetSysColor

winspool.drv

EnumPrintersW
ClosePrinter
DocumentPropertiesW
OpenPrinterW

shell32

DragQueryFileW
DragFinish
DragAcceptFiles
CommandLineToArgvW
ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize
CLSIDFromString

msvcrt

_controlfp
_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_XcptFilter

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 564KB - Virtual size: 562KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idip
Size: 399KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8498b5023c5209dec3cf1668e3c155cf

Headers

File Characteristics

Imports

version

kernel32

user32

winspool.drv

shell32

ole32

msvcrt

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4.0MB

.rsrc Size: 564KB - Virtual size: 562KB

.idip Size: 399KB - Virtual size: 400KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4.0MB

.rsrc
Size: 564KB - Virtual size: 562KB

.idip
Size: 399KB - Virtual size: 400KB