877e096061ddea04161a032a4247d01d

Sharing

Copy URL Twitter E-mail

General

Target

877e096061ddea04161a032a4247d01d
Size

1.7MB
MD5

877e096061ddea04161a032a4247d01d
SHA1

79f86410c62957319fa0a6a4e83ac7b61574a01e
SHA256

c3cfdfd9e981ea779bd6135fc84f607643cb39fda692f7162d2a82f88aa403c8
SHA512

76c5161d59c55ed6621c342dea7569d0a8a078eb05934c4575ab56bbdd1997d303dfee2c3194d281f3433c289f1ee0ced7c9f7026e353f6ca2ddd6850dbf8fe2
SSDEEP

49152:YTlxlviXlFklsyDgy1cZAeJ6x3P1/mxiAgU8cMvr:WlPSkx5bz19/mxSUrMvr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
877e096061ddea04161a032a4247d01d

Files

877e096061ddea04161a032a4247d01d
.exe windows:5 windows x86 arch:x86

4b687069219ce1dd2706ea5e2b275cbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

user32

GetKeyboardType
mouse_event

advapi32

RegQueryValueExA
ReportEventA
StartServiceA
QueryServiceConfig2A

oleaut32

SysFreeString
SafeArrayPtrOfIndex

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA
SHGetSpecialFolderLocation

wininet

InternetReadFile

ws2_32

gethostname

wsock32

WSACleanup

winmm

waveInUnprepareHeader

msvfw32

DrawDibDraw

msvcrt

__dllonexit

psapi

GetMappedFileNameW

Sections

CODE
Size: 306KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b687069219ce1dd2706ea5e2b275cbd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

gdi32

comctl32

shell32

wininet

ws2_32

wsock32

winmm

msvfw32

msvcrt

psapi

Sections

CODE Size: 306KB - Virtual size: 616KB

DATA Size: 16KB - Virtual size: 24KB

BSS Size: - Virtual size: 24KB

.idata Size: 12KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 4KB

.reloc Size: - Virtual size: 40KB

.rsrc Size: 7KB - Virtual size: 32KB

.sedata Size: 1.4MB - Virtual size: 1.4MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

CODE
Size: 306KB - Virtual size: 616KB

DATA
Size: 16KB - Virtual size: 24KB

BSS
Size: - Virtual size: 24KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 4KB

.reloc
Size: - Virtual size: 40KB

.rsrc
Size: 7KB - Virtual size: 32KB

.sedata
Size: 1.4MB - Virtual size: 1.4MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB