6af83a2a96f70d33304d4c78dcb60060e750ad53f6e797b4bf4ae740ffe30e6c

Sharing

Copy URL Twitter E-mail

General

Target

6af83a2a96f70d33304d4c78dcb60060e750ad53f6e797b4bf4ae740ffe30e6c
Size

12.7MB
MD5

2dd6eb6f51e661c38c4e5779eeadbad8
SHA1

7ed91f95808de82589cdf25cd20ee141e941cce3
SHA256

6af83a2a96f70d33304d4c78dcb60060e750ad53f6e797b4bf4ae740ffe30e6c
SHA512

6043b1de50d679b89d20cefd566600b4dd4b0c228cd691a54f0b434a8e1a2d7b7263494451f4fc902f560aaaddb4da57418ee4c4af8056e7b70c1c101ceb5873
SSDEEP

196608:lloZZb6G5IDJuKfPralHpiEXaeK2K73zHZIpiI161HZBVS59YRKdNBDyOQCTMv9y:llYmGGDJdfTalHoFDqpzCZS5Xd2nCOb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af83a2a96f70d33304d4c78dcb60060e750ad53f6e797b4bf4ae740ffe30e6c

Files

6af83a2a96f70d33304d4c78dcb60060e750ad53f6e797b4bf4ae740ffe30e6c
.exe windows:5 windows x86 arch:x86

b3d4b75fa01d02850c242a29b75ac629

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

PeekMessageA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 937KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AEg
Size: - Virtual size: 5.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.~$Y
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gKf
Size: 12.7MB - Virtual size: 12.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3d4b75fa01d02850c242a29b75ac629

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 937KB

.rdata Size: - Virtual size: 2.9MB

.data Size: - Virtual size: 370KB

.AEg Size: - Virtual size: 5.8MB

.~$Y Size: 4KB - Virtual size: 2KB

.gKf Size: 12.7MB - Virtual size: 12.7MB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: - Virtual size: 937KB

.rdata
Size: - Virtual size: 2.9MB

.data
Size: - Virtual size: 370KB

.AEg
Size: - Virtual size: 5.8MB

.~$Y
Size: 4KB - Virtual size: 2KB

.gKf
Size: 12.7MB - Virtual size: 12.7MB

.rsrc
Size: 12KB - Virtual size: 10KB