b0710b22c8d142864b321c7a9f9c05b5f16373a99fd91a447473b42df1a5543f

Sharing

Copy URL Twitter E-mail

General

Target

b0710b22c8d142864b321c7a9f9c05b5f16373a99fd91a447473b42df1a5543f
Size

6.9MB
MD5

06441c681c21eade70b8de01c1d42f81
SHA1

be0a96f6cd36abc620ec3ee238485de9d6489de1
SHA256

b0710b22c8d142864b321c7a9f9c05b5f16373a99fd91a447473b42df1a5543f
SHA512

c907c8c19e8a7406cc6fbe6a2ff9f3317174f66db14744205a52ef5276f14040f79b451f503b53db887545013af3c496a7b73f53da209e157fe0b4e540d9c3e7
SSDEEP

196608:uZ+z30uXAWgAhHkie0ljF5To62ja5i3H:ukz30uXAxAiiNjfU64

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0710b22c8d142864b321c7a9f9c05b5f16373a99fd91a447473b42df1a5543f

Files

b0710b22c8d142864b321c7a9f9c05b5f16373a99fd91a447473b42df1a5543f
.exe windows:5 windows x86 arch:x86

60f17855093f0ce9cb415b381421f83d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

PeekMessageA
CharUpperBuffW

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 726KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.@Kc
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.)Dw
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c^m
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60f17855093f0ce9cb415b381421f83d

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 726KB

.rdata Size: - Virtual size: 118KB

.data Size: - Virtual size: 377KB

.@Kc Size: - Virtual size: 4.0MB

.)Dw Size: 4KB - Virtual size: 2KB

.c^m Size: 6.9MB - Virtual size: 6.9MB

.rsrc Size: 20KB - Virtual size: 16KB

.text
Size: - Virtual size: 726KB

.rdata
Size: - Virtual size: 118KB

.data
Size: - Virtual size: 377KB

.@Kc
Size: - Virtual size: 4.0MB

.)Dw
Size: 4KB - Virtual size: 2KB

.c^m
Size: 6.9MB - Virtual size: 6.9MB

.rsrc
Size: 20KB - Virtual size: 16KB