fa8e1886ce7fcb32d90f964eda9c80c0d69e8e965a5804c57fcd2c2ef4a0c9a0

Sharing

Copy URL Twitter E-mail

General

Target

fa8e1886ce7fcb32d90f964eda9c80c0d69e8e965a5804c57fcd2c2ef4a0c9a0
Size

6.0MB
MD5

9042e68a232d773d24b8ef89a0493996
SHA1

932e498664fb3d4853f38a7fc8e2f5d50d6a9fe4
SHA256

fa8e1886ce7fcb32d90f964eda9c80c0d69e8e965a5804c57fcd2c2ef4a0c9a0
SHA512

882072c8a8719ecf8b6c87a8d69e2450c953206f331a3fd46e41d5174f965939100cf9fb4e721e5f0d94b4555ba9d31169d904dcbcb9ff5af556c993972639f4
SSDEEP

98304:NR9HANjVuOtMRvWstv3L3PDLu3K0YccUFcq8OD2U+liE0HU/H9AJ3Z2l8OUCN3A:NfHAVwmMRvd3L3FzcPd8OD2RkUf94m8n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8e1886ce7fcb32d90f964eda9c80c0d69e8e965a5804c57fcd2c2ef4a0c9a0

Files

fa8e1886ce7fcb32d90f964eda9c80c0d69e8e965a5804c57fcd2c2ef4a0c9a0
.exe windows:5 windows x86 arch:x86

38a5284e8d36f40c9916211792616fab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord2377

msvcrt

rand

advapi32

RegOpenKeyExA

kernel32

lstrcpyW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

CombineRgn

user32

MessageBeep
CharUpperBuffW

shell32

ShellAboutW

winmm

waveOutGetNumDevs

Sections

.text
Size: - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.}&P
Size: - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|e`
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.!2X
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.*@d
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38a5284e8d36f40c9916211792616fab

Headers

DLL Characteristics

File Characteristics

Imports

mfc42u

msvcrt

advapi32

kernel32

gdi32

user32

shell32

winmm

Sections

.text Size: - Virtual size: 47KB

.data Size: - Virtual size: 1KB

.}&P Size: - Virtual size: 94KB

.htext Size: - Virtual size: 4KB

.|e` Size: - Virtual size: 3.4MB

.!2X Size: 2KB - Virtual size: 1KB

.*@d Size: 6.0MB - Virtual size: 6.0MB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: - Virtual size: 47KB

.data
Size: - Virtual size: 1KB

.}&P
Size: - Virtual size: 94KB

.htext
Size: - Virtual size: 4KB

.|e`
Size: - Virtual size: 3.4MB

.!2X
Size: 2KB - Virtual size: 1KB

.*@d
Size: 6.0MB - Virtual size: 6.0MB

.rsrc
Size: 25KB - Virtual size: 24KB