f78b396cc54c6de5c82dbd22574bcd0121b61273944d1cd6c134ef5fe817707d

Sharing

Copy URL Twitter E-mail

General

Target

f78b396cc54c6de5c82dbd22574bcd0121b61273944d1cd6c134ef5fe817707d
Size

7.2MB
MD5

3ab641e1b47fd84b235f9edeae184bb8
SHA1

cb041488bda75eb769ded527b2a71f43e8394f73
SHA256

f78b396cc54c6de5c82dbd22574bcd0121b61273944d1cd6c134ef5fe817707d
SHA512

5dc0ce559729f2f1ad227aca275f1b2e41eaa59079f697e458c4f5e9321efa8e57504aa3d64ecbc8899cad55bc96f3b26557e9c354e7134baf73aecf0e2fae60
SSDEEP

98304:GbXPMduiFr+ld8Fw7HVczIpmLIDrEl5PaYihqVkfWvTtYzQ/SwbcO:sXETqjzls4r2PaYiEGIYdwbV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f78b396cc54c6de5c82dbd22574bcd0121b61273944d1cd6c134ef5fe817707d

Files

f78b396cc54c6de5c82dbd22574bcd0121b61273944d1cd6c134ef5fe817707d
.exe windows:5 windows x86 arch:x86

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetWindowTextW
CharUpperBuffW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

wtsapi32

WTSRegisterSessionNotification

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.+7W
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(*t
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.d1^
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$/i
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b203085e0f03b4013da5456390f2d423

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

iphlpapi

wtsapi32

oleacc

gdi32

winspool.drv

oleaut32

Sections

.text Size: - Virtual size: 512KB

.+7W Size: - Virtual size: 8KB

.reloc Size: - Virtual size: 4KB

.htext Size: - Virtual size: 4KB

.(*t Size: - Virtual size: 4.1MB

.d1^ Size: 2KB - Virtual size: 1KB

.$/i Size: 7.2MB - Virtual size: 7.2MB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 47KB - Virtual size: 47KB

.text
Size: - Virtual size: 512KB

.+7W
Size: - Virtual size: 8KB

.reloc
Size: - Virtual size: 4KB

.htext
Size: - Virtual size: 4KB

.(*t
Size: - Virtual size: 4.1MB

.d1^
Size: 2KB - Virtual size: 1KB

.$/i
Size: 7.2MB - Virtual size: 7.2MB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 47KB - Virtual size: 47KB