b772435cb6bde1c928ed1508636f725c

Sharing

Copy URL

Twitter E-mail

General

Target

b772435cb6bde1c928ed1508636f725c
Size

383KB
MD5

b772435cb6bde1c928ed1508636f725c
SHA1

78682e06d6a2bf3576bd84eead6a86dcf19c72c0
SHA256

02b8cccf2112a2de06962e734741455e3308d1ca3ccad0d0e69a9dbee495270a
SHA512

10e524a3c9b1e135f78a3d4f1d1017602efacaa8a1e905b42aecea31e49fa7a8c074892e502ac52ffc21955df3554c762f61d9923deef930b0f6511a6a50b441
SSDEEP

6144:WwNfnZY618OjmV8NLyXXqaafA7uPPE85c5wpTJc4bCm9CZw:WwxZ58OjmV8u6CgPje5iK4um9CG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b772435cb6bde1c928ed1508636f725c

Files

b772435cb6bde1c928ed1508636f725c
.exe windows:5 windows x64 arch:x64

d0b576aa1597bfc88eef11f7320a63ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

__WSAFDIsSet

version

VerQueryValueW

winmm

timeGetTime

comctl32

ImageList_Remove

mpr

WNetUseConnectionW

wininet

FtpOpenFileW

psapi

GetProcessMemoryInfo

iphlpapi

IcmpSendEcho

userenv

LoadUserProfileW

uxtheme

IsThemeActive

user32

GetDC

gdi32

LineTo

comdlg32

GetSaveFileNameW

advapi32

AddAce

shell32

DragFinish

ole32

CoGetObject

oleaut32

SysStringLen

Sections

.MPRESS1
Size: 353KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0b576aa1597bfc88eef11f7320a63ec

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wsock32

version

winmm

comctl32

mpr

wininet

psapi

iphlpapi

userenv

uxtheme

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.MPRESS1 Size: 353KB - Virtual size: 984KB

.MPRESS2 Size: 4KB - Virtual size: 3KB

.rsrc Size: 25KB - Virtual size: 25KB

.MPRESS1
Size: 353KB - Virtual size: 984KB

.MPRESS2
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 25KB - Virtual size: 25KB