6d5ac35242c7d4b6da13fa60a1968af4dd0cf0cc9b7176a349921f90f01fda6d

Sharing

Copy URL Twitter E-mail

General

Target

6d5ac35242c7d4b6da13fa60a1968af4dd0cf0cc9b7176a349921f90f01fda6d
Size

8.0MB
MD5

5d16a27321a6340f93a1d0fb8ac78405
SHA1

43880372ffe32fb03338767b4ad8473ed644c981
SHA256

6d5ac35242c7d4b6da13fa60a1968af4dd0cf0cc9b7176a349921f90f01fda6d
SHA512

f3c56028dfd49608dbc09bb0da5fdd40cc740ace7f2772a2f792eb90b37a6b51ad91d1f6dba17b6b3ea5133a5cdec6ca25a9ecd7904e737e9e24625fb879ce82
SSDEEP

196608:6I32O/oWnIkR6Ru7N1YwZerG78WDhRxEFTj1fJ71:6I3Z/FnIK6R6N1TZOWDhRQP5J7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d5ac35242c7d4b6da13fa60a1968af4dd0cf0cc9b7176a349921f90f01fda6d

Files

6d5ac35242c7d4b6da13fa60a1968af4dd0cf0cc9b7176a349921f90f01fda6d
.exe windows:5 windows x86 arch:x86

8a57e57e888b9500a45d2bbf02e3eef3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

ole32

CoRevokeClassObject

user32

GetClassInfoA
GetScrollPos
CharUpperBuffW

atl

ord47

shell32

Shell_NotifyIconA
Shell_NotifyIconA

gdi32

GetClipBox
CombineRgn

advapi32

ControlService
RegCloseKey

winspool.drv

DocumentPropertiesA
ClosePrinter

comctl32

ord17
ord17

oledlg

ord8

oleaut32

VariantInit
UnRegisterTypeLi

shlwapi

PathFileExistsA

rasapi32

RasGetConnectStatusA

winmm

waveOutUnprepareHeader

ws2_32

WSAAsyncSelect

wininet

InternetCloseHandle

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 830KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 453KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1*A
Size: - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rwR
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o?s
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a57e57e888b9500a45d2bbf02e3eef3

Headers

File Characteristics

Imports

kernel32

ole32

user32

atl

shell32

gdi32

advapi32

winspool.drv

comctl32

oledlg

oleaut32

shlwapi

rasapi32

winmm

ws2_32

wininet

comdlg32

Sections

.text Size: - Virtual size: 1.2MB

.rdata Size: - Virtual size: 830KB

.data Size: - Virtual size: 453KB

.1*A Size: - Virtual size: 5.1MB

.rwR Size: 8KB - Virtual size: 4KB

.o?s Size: 7.9MB - Virtual size: 7.9MB

.rsrc Size: 72KB - Virtual size: 69KB

.text
Size: - Virtual size: 1.2MB

.rdata
Size: - Virtual size: 830KB

.data
Size: - Virtual size: 453KB

.1*A
Size: - Virtual size: 5.1MB

.rwR
Size: 8KB - Virtual size: 4KB

.o?s
Size: 7.9MB - Virtual size: 7.9MB

.rsrc
Size: 72KB - Virtual size: 69KB