General

  • Target

    d99c62c2f66345cdc3c12ee7ebd781869fa9b801cef7b7beb6a72a46ce1a9dc5

  • Size

    1.2MB

  • MD5

    292d2af7de32ea1120af0b42963e1590

  • SHA1

    11046d79f62001b7b192f105119ef5f7c8d35c91

  • SHA256

    d99c62c2f66345cdc3c12ee7ebd781869fa9b801cef7b7beb6a72a46ce1a9dc5

  • SHA512

    b3356537e6c70fa62423e5211a64a8117f746817e9fe59d9053042c42480c601c9e41e0955788f9a0c78aeeb0901a383c727eae5bdd39177d388bb09fdd436e7

  • SSDEEP

    24576:2+x+nfZW2IFJ3fiRUJmBTEGwtXVT7xk8nBxaHOxjUoBH:2+yZW2IFJ8yRvk8i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d99c62c2f66345cdc3c12ee7ebd781869fa9b801cef7b7beb6a72a46ce1a9dc5
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • .data
  • .rdata
    .vbs
  • .rsrc/0/GROUP_ICON/DEFAULT_ICON
  • .rsrc/0/ICON/1.ico
  • .rsrc/0/ICON/2.ico
  • .rsrc/0/ICON/3.ico
  • .rsrc/0/ICON/4.ico
  • .rsrc/0/ICON/5.ico
  • .rsrc/0/ICON/6.ico
  • .rsrc/0/ICON/7.ico
  • .rsrc/0/ICON/8.ico
  • .rsrc/0/ICON/9.ico
  • .rsrc/0/MANIFEST/1
    .xml
  • .rsrc/2052/BITMAP/1031.bmp
  • .rsrc/2052/BITMAP/1038.bmp
  • .rsrc/2052/BITMAP/1138.bmp
  • .rsrc/2052/BITMAP/1139.bmp
  • .rsrc/2052/BITMAP/1140.bmp
  • .rsrc/2052/BITMAP/1141.bmp
  • .rsrc/2052/BITMAP/1142.bmp
  • .rsrc/2052/BITMAP/1143.bmp
  • .rsrc/2052/BITMAP/1144.bmp
  • .rsrc/2052/BITMAP/1145.bmp
  • .rsrc/2052/BITMAP/30994.bmp
  • .rsrc/2052/BITMAP/30995.bmp
  • .rsrc/2052/BITMAP/30996.bmp
  • .rsrc/2052/BITMAP/IEXT_IDB_STATEIMAGES.bmp
  • .rsrc/2052/CURSOR/1
  • .rsrc/2052/CURSOR/2
  • .rsrc/2052/CURSOR/3
  • .rsrc/2052/CURSOR/4
  • .rsrc/2052/DIALOG/1037
  • .rsrc/2052/DIALOG/1124
  • .rsrc/2052/DIALOG/1134
  • .rsrc/2052/DIALOG/1150
  • .rsrc/2052/DIALOG/30721
  • .rsrc/2052/DIALOG/30722
  • .rsrc/2052/DIALOG/554
  • .rsrc/2052/GROUP_CURSOR/1032
  • .rsrc/2052/GROUP_CURSOR/1033
  • .rsrc/2052/GROUP_CURSOR/30977
  • .rsrc/2052/MENU/1039
  • .rsrc/2052/MENU/127
  • .rsrc/2052/TEXTINCLUDE/1
  • .rsrc/2052/TEXTINCLUDE/2
  • .rsrc/2052/TEXTINCLUDE/3
  • .rsrc/2052/string.txt
  • .rsrc/2052/version.txt
  • .text