79fca9c81b92b2e3ad919bb573955cb8

General

Target

79fca9c81b92b2e3ad919bb573955cb8
Size

334KB
MD5

79fca9c81b92b2e3ad919bb573955cb8
SHA1

130ed6c0a1497611748053f5b065ab0e1285ead0
SHA256

b29a80def42061bcc666f2f535737eb8faab0e93dbfcb5e7aba71894a7b0784e
SHA512

1ae74f469bf8bea00fedd90a9ab5d2058593f185d4fa9f032b58356eec031201a065287fcf2c0a6931707307dff938cf78b01027c977214bc602e7458a8d800b
SSDEEP

6144:AgDD8vn1qGk3P2sL/k/XJikf4LS6F1oOO1TyPztcBBoPNgu5M5dBbK0g1VLtiJ5J:A08vYP2sQ/XWLSC1z8TSztcb4SdBbs3M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79fca9c81b92b2e3ad919bb573955cb8

Files

79fca9c81b92b2e3ad919bb573955cb8
.exe windows:4 windows x86 arch:x86

c0d91ed28ba2e5a77d588c403dd390ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
CreateWindowExA
FindWindowA
MoveWindow
GetWindowRect
ShowOwnedPopups
BringWindowToTop
GetDialogBaseUnits
GetDlgItem
ShowWindow

kernel32

ResetEvent
GetModuleHandleA
FreeEnvironmentStringsA
GetExitCodeThread
TlsSetValue
GetACP
OpenSemaphoreA
ReleaseSemaphore
CloseHandle
VirtualAlloc
GetProcAddress
GetStartupInfoA
GetProcessHeap
SetEvent
SuspendThread
LocalHandle
LocalReAlloc
ReleaseMutex
GetStdHandle
TlsGetValue
LocalFree
OpenEventA
OpenMutexA

winspool.drv

ConfigurePortA
DeletePrinterConnectionA
AdvancedDocumentPropertiesA
AddPrinterA
DeletePrinterKeyA
ConnectToPrinterDlg
AddPrinterConnectionA
AddJobA
AddFormA
ClosePrinter
AbortPrinter
DeletePrinter

msvcrt

_controlfp
exit
_XcptFilter
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_acmdln
_except_handler3
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.oyk
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0d91ed28ba2e5a77d588c403dd390ab

Headers

File Characteristics

Imports

user32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 312KB - Virtual size: 311KB

.data Size: 512B - Virtual size: 95KB

.oyk Size: 2KB - Virtual size: 2KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 312KB - Virtual size: 311KB

.data
Size: 512B - Virtual size: 95KB

.oyk
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 5KB - Virtual size: 5KB