b69aa6791405034317d27cde2c05bedfd6cfe56fb147b95ce8d06ec8ec58ab3f

Sharing

Copy URL

Twitter E-mail

General

Target

b69aa6791405034317d27cde2c05bedfd6cfe56fb147b95ce8d06ec8ec58ab3f
Size

1.9MB
MD5

218081cb05098e8276f1849ba125461d
SHA1

f5b40672682d050d3d9faf2727f7345f05007f69
SHA256

b69aa6791405034317d27cde2c05bedfd6cfe56fb147b95ce8d06ec8ec58ab3f
SHA512

5bc629b3596e439d8bcfd7abe4ee3acc16361383870400293770394feb1d7ddac80e1713749a59fef086153ae026707cb06b93b8bfc4d1e4d3c947a6565449fb
SSDEEP

12288:XcLuTC1Vo+3DCjyT0pcF9Wmbzbl6ekKvIGqYk5crXCLw1a+fyALnL:MLs6dOWToU99zZcKv9qYS6uqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b69aa6791405034317d27cde2c05bedfd6cfe56fb147b95ce8d06ec8ec58ab3f

Files

b69aa6791405034317d27cde2c05bedfd6cfe56fb147b95ce8d06ec8ec58ab3f
.exe windows:4 windows x86 arch:x86

3db0c82b9e8fcb9290e71bfc7eb8bad6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

proc_filedd

GetAutoUpdateInstance

gdiplus

GdipFree

init_file_proc

?LogInfo@@YAXPBDZZ

dbghelp

MakeSureDirectoryPathExists

gc

GC_free

mfc80

ord2654

msvcr80

atol

user32

GetDC

gdi32

DPtoLP

msimg32

GradientFill

advapi32

FreeSid

shell32

ShellExecuteA

comctl32

ImageList_Draw

shlwapi

PathFindExtensionA

ole32

CoTaskMemFree

oleaut32

SystemTimeToVariantTime

msvcp80

?uncaught_exception@std@@YA_NXZ

netapi32

NetWkstaGetInfo

Sections

.MPRESS1
Size: 560KB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3db0c82b9e8fcb9290e71bfc7eb8bad6

Headers

File Characteristics

Imports

kernel32

proc_filedd

gdiplus

init_file_proc

dbghelp

gc

mfc80

msvcr80

user32

gdi32

msimg32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

msvcp80

netapi32

Sections

.MPRESS1 Size: 560KB - Virtual size: 5.2MB

.MPRESS2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.MPRESS1
Size: 560KB - Virtual size: 5.2MB

.MPRESS2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB