44fefa26721b1cc6879af8104eef7e02

Sharing

Copy URL Twitter E-mail

General

Target

44fefa26721b1cc6879af8104eef7e02
Size

369KB
MD5

44fefa26721b1cc6879af8104eef7e02
SHA1

36a48a0e48c0b1c4ad902465ee0ca0bfe4f1a4f6
SHA256

c30f2b486fbb12265e02cd8041fd5e6145640c322d6d90494c4b77b0333a213d
SHA512

43b827f47f51612ef6762afdc496815f099c5b8bd3229bd749e869c0f47bc0717ef6bc57855d0f679fdd5fbd60ca3ddc833fa43d4021a495734412b4ae5c8fdc
SSDEEP

6144:8HW7msGTMJK3Dr9o9rD+CLMLNqZuYEF5cw0Hc3eHtpjEd0xYvWBURovnz5l:MW7mZYJKVoRD+C48YXcw2/YvWBWwz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fefa26721b1cc6879af8104eef7e02

Files

44fefa26721b1cc6879af8104eef7e02
.exe windows:4 windows x86 arch:x86

f29ff6a9478486fc694c9c8c65be254e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegFlushKey

avicap32

capCreateCaptureWindowA

comctl32

ImageList_Add

gdi32

SaveDC

mpr

WNetGetUserA

msacm32

acmMetrics

oleaut32

VariantCopy

shell32

ShellExecuteA

user32

GetDC

version

VerQueryValueA

wininet

InternetOpenA

winmm

waveInStop

ws2_32

WSAIoctl

wsock32

send

Sections

CODE
Size: - Virtual size: 520KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 325KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.depack
Size: 361B - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

000
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f29ff6a9478486fc694c9c8c65be254e

Headers

File Characteristics

Imports

kernel32

advapi32

avicap32

comctl32

gdi32

mpr

msacm32

oleaut32

shell32

user32

version

wininet

winmm

ws2_32

wsock32

Sections

CODE Size: - Virtual size: 520KB

DATA Size: 325KB - Virtual size: 360KB

.rsrc0 Size: 9KB - Virtual size: 12KB

.rsrc Size: 32KB - Virtual size: 32KB

.depack Size: 361B - Virtual size: 524KB

000 Size: 512B - Virtual size: 512B

CODE
Size: - Virtual size: 520KB

DATA
Size: 325KB - Virtual size: 360KB

.rsrc0
Size: 9KB - Virtual size: 12KB

.rsrc
Size: 32KB - Virtual size: 32KB

.depack
Size: 361B - Virtual size: 524KB

000
Size: 512B - Virtual size: 512B