cd8e9a720805fa0fbdd7d0ef7504dae9e93c37a0572b55b94b81c61f5a483c57

Sharing

Copy URL Twitter E-mail

General

Target

cd8e9a720805fa0fbdd7d0ef7504dae9e93c37a0572b55b94b81c61f5a483c57
Size

12.4MB
MD5

a02390113e0b25c44c214ce9b073c8f3
SHA1

758ded4a3f686a70a9976cd5e6f57be0ada3bd7e
SHA256

cd8e9a720805fa0fbdd7d0ef7504dae9e93c37a0572b55b94b81c61f5a483c57
SHA512

d5f412a19b6f9de2e21030d219db6e7abf7ee0f6afef607dd2bea5cf58fa1353365b412bfd08e344084189131059db44d8a125fa939fa561553d224d66c0edd5
SSDEEP

196608:M9UOrs7FvyaKG9k8qDKpdqC7MRPOZNT98m//gaw0u5axhRrRj:M9UngvEd1n57M+T98m/oj5M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd8e9a720805fa0fbdd7d0ef7504dae9e93c37a0572b55b94b81c61f5a483c57

Files

cd8e9a720805fa0fbdd7d0ef7504dae9e93c37a0572b55b94b81c61f5a483c57
.dll windows:4 windows x86 arch:x86

e20eabebbb6bc3ba6fb24d96f2706180

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc

user32

GetMenuItemID

gdi32

SaveDC

winmm

midiOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ImageList_Destroy

ws2_32

getpeername

comdlg32

GetFileTitleA

Exports

Exports

RegisterTdxFunc

Sections

.text
Size: - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp7
Size: 4KB - Virtual size: 75B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e20eabebbb6bc3ba6fb24d96f2706180

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 676KB

.rdata Size: - Virtual size: 531KB

.data Size: - Virtual size: 260KB

.rsrc Size: 12KB - Virtual size: 9KB

.svmp1 Size: - Virtual size: 3.6MB

.svmp2 Size: 3.8MB - Virtual size: 3.8MB

.svmp3 Size: 2.6MB - Virtual size: 2.6MB

.svmp4 Size: 5.6MB - Virtual size: 5.6MB

.svmp5 Size: 16KB - Virtual size: 12KB

.svmp6 Size: 368KB - Virtual size: 367KB

.svmp7 Size: 4KB - Virtual size: 75B

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: - Virtual size: 676KB

.rdata
Size: - Virtual size: 531KB

.data
Size: - Virtual size: 260KB

.rsrc
Size: 12KB - Virtual size: 9KB

.svmp1
Size: - Virtual size: 3.6MB

.svmp2
Size: 3.8MB - Virtual size: 3.8MB

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

.svmp4
Size: 5.6MB - Virtual size: 5.6MB

.svmp5
Size: 16KB - Virtual size: 12KB

.svmp6
Size: 368KB - Virtual size: 367KB

.svmp7
Size: 4KB - Virtual size: 75B

.reloc
Size: 16KB - Virtual size: 15KB