f8b3c3c7cb327be45363d061cb49cfaa

Sharing

Copy URL Twitter E-mail

General

Target

f8b3c3c7cb327be45363d061cb49cfaa
Size

920KB
MD5

f8b3c3c7cb327be45363d061cb49cfaa
SHA1

74dc30ed72eba164e4480934a119b7a7f67108f0
SHA256

406d4223eccdb66227415fdb872b9ad6b1ba0267090b7d5fc5d477729e961928
SHA512

a36ae2084e6eb75736ca6fe5f9b8527ba2f58868f74277bbfdbfcd4ae918612a5a900b520ea3a2714ddeb71716ab7ec0434ef935128608e1b989da857b2c31cf
SSDEEP

24576:bmvsRKcErRWOwHhE2N4mxGe/frchlx9xknSsh29fmRgl4l5TKH:SrOy2N4mxGe/jchlx9xknL2Ju55TK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8b3c3c7cb327be45363d061cb49cfaa

Files

f8b3c3c7cb327be45363d061cb49cfaa
.exe windows:4 windows x86 arch:x86

e367194d270ea2825e6f19bede9b8f03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

SetCurrentDirectoryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

user32

SetClipboardData
MessageBoxA

gdi32

ScaleViewportExtEx

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CreateILockBytesOnHGlobal

oleaut32

SysAllocString

comctl32

ImageList_SetBkColor

oledlg

ord8

ws2_32

inet_ntoa

wininet

InternetCanonicalizeUrlA

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ffasdw0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.ffasdw1
Size: 892KB - Virtual size: 890KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e367194d270ea2825e6f19bede9b8f03

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

ws2_32

wininet

comdlg32

Sections

.text Size: - Virtual size: 649KB

.rdata Size: - Virtual size: 380KB

.data Size: - Virtual size: 272KB

.rsrc Size: 20KB - Virtual size: 77KB

.ffasdw0 Size: - Virtual size: 192KB

.ffasdw1 Size: 892KB - Virtual size: 890KB

.reloc Size: 4KB - Virtual size: 288B

.text
Size: - Virtual size: 649KB

.rdata
Size: - Virtual size: 380KB

.data
Size: - Virtual size: 272KB

.rsrc
Size: 20KB - Virtual size: 77KB

.ffasdw0
Size: - Virtual size: 192KB

.ffasdw1
Size: 892KB - Virtual size: 890KB

.reloc
Size: 4KB - Virtual size: 288B