c81eecd4e9af21910f9e7fbdfc949d34

Sharing

Copy URL Twitter E-mail

General

Target

c81eecd4e9af21910f9e7fbdfc949d34
Size

457KB
MD5

c81eecd4e9af21910f9e7fbdfc949d34
SHA1

0d7ffa763d77042bdb613db8b427b5cefc57fa70
SHA256

c691b1542d563c87614d3e996820c859d92dd92d8ae8222450166d244a87de47
SHA512

6e69f4011c752c03a158e46f0bd6a9e627d28a0ff4c6fbecc164fe550579027bc225c3d7538a41ebd99b998e85ecebaac69a0fb26dc9ea5f5987e4a621b4cd3f
SSDEEP

12288:cCp68z9P62g1k0xIGND+dIo0v1uySXFTUpTV:I8z9PDW1B0B1Ta

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c81eecd4e9af21910f9e7fbdfc949d34

Files

c81eecd4e9af21910f9e7fbdfc949d34
.exe windows:4 windows x86 arch:x86

f43dcb387ce90c09ed94e923707075a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

mpr

WNetGetUserA

version

VerQueryValueA

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

wsock32

send

winmm

waveInStop

avicap32

capCreateCaptureWindowA

msacm32

acmMetrics

ws2_32

WSAIoctl

Sections

.text
Size: 447KB - Virtual size: 772KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 121B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 127B - Virtual size: 127B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 133B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

linghun
Size: 62B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f43dcb387ce90c09ed94e923707075a3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

comctl32

shell32

wininet

wsock32

winmm

avicap32

msacm32

ws2_32

Sections

.text Size: 447KB - Virtual size: 772KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

linghun Size: 62B - Virtual size: 62B

linghun Size: 121B - Virtual size: 121B

linghun Size: 62B - Virtual size: 62B

linghun Size: 127B - Virtual size: 127B

linghun Size: 62B - Virtual size: 62B

linghun Size: 133B - Virtual size: 133B

linghun Size: 62B - Virtual size: 62B

.text
Size: 447KB - Virtual size: 772KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

linghun
Size: 62B - Virtual size: 62B

linghun
Size: 121B - Virtual size: 121B

linghun
Size: 62B - Virtual size: 62B

linghun
Size: 127B - Virtual size: 127B

linghun
Size: 62B - Virtual size: 62B

linghun
Size: 133B - Virtual size: 133B

linghun
Size: 62B - Virtual size: 62B