e72a90f1edb8085bd910159e76da11e6f3f08010eafb0c8441cb1a454a9dbc87

Sharing

Copy URL Twitter E-mail

General

Target

e72a90f1edb8085bd910159e76da11e6f3f08010eafb0c8441cb1a454a9dbc87
Size

14.9MB
MD5

fda014f99b4bd5bfe53e9cfbeb10a690
SHA1

81b19e38c52a8ff6d0e2078298770ad55d0fc78c
SHA256

e72a90f1edb8085bd910159e76da11e6f3f08010eafb0c8441cb1a454a9dbc87
SHA512

54e45db6e44214a2f482c77ed890bde95ae1c4ff369406c8526be345230c5095ecced779d9233b6c6b00ac44e90c4d9dd34c1533476a0bd7484bdd28d8aa1ef2
SSDEEP

393216:Gxhc07VTXbj6Oof4q9KraesgTuPxGr3jv+oOBxEeI:GxhcGr+rfIraHgS5iv+zE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e72a90f1edb8085bd910159e76da11e6f3f08010eafb0c8441cb1a454a9dbc87

Files

e72a90f1edb8085bd910159e76da11e6f3f08010eafb0c8441cb1a454a9dbc87
.exe windows:5 windows x86 arch:x86

d873259ca6be9eea4cf3855cd35c0b90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

send

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetClipboardData

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

SHGetSpecialFolderPathA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Destroy

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.*$w
Size: - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lI@
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.IWZ
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d873259ca6be9eea4cf3855cd35c0b90

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 3.1MB

.data Size: - Virtual size: 696KB

.*$w Size: - Virtual size: 9.1MB

.lI@ Size: 4KB - Virtual size: 2KB

.IWZ Size: 14.9MB - Virtual size: 14.9MB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 3.1MB

.data
Size: - Virtual size: 696KB

.*$w
Size: - Virtual size: 9.1MB

.lI@
Size: 4KB - Virtual size: 2KB

.IWZ
Size: 14.9MB - Virtual size: 14.9MB

.rsrc
Size: 20KB - Virtual size: 19KB