12f5383db2cc76cc934f1f4a5c4fb7663fec8d1c59233bd47801cfd05d033c34

Sharing

Copy URL Twitter E-mail

General

Target

12f5383db2cc76cc934f1f4a5c4fb7663fec8d1c59233bd47801cfd05d033c34
Size

8.3MB
MD5

7653ad6652dd595e53a5436e4422675c
SHA1

4543cce98b7eafb60b43641dcd0cc04deac650b0
SHA256

12f5383db2cc76cc934f1f4a5c4fb7663fec8d1c59233bd47801cfd05d033c34
SHA512

14488bdd0be13690729a609cf7369f402240988f4842f4c61814b6508ce51a9cf6d1ce7ee907c1258af2cb54440da6680e07b453f7934e4fcf4e35502ac3ba35
SSDEEP

196608:Hhm36bCbBxcbKAN4hU5Y6fYNp/zfopoFdrWxB+AUgtg:HhvObMbMDzLftL6xB5Uag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f5383db2cc76cc934f1f4a5c4fb7663fec8d1c59233bd47801cfd05d033c34

Files

12f5383db2cc76cc934f1f4a5c4fb7663fec8d1c59233bd47801cfd05d033c34
.exe windows:4 windows x86 arch:x86

f53e089ca4f72ed0eaece94e5ed681d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

socket

rasapi32

RasGetConnectStatusA

kernel32

GetCurrentProcess

user32

KillTimer

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetMalloc

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_GetImageCount

wininet

InternetCloseHandle

comdlg32

ChooseFontA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 7.3MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f53e089ca4f72ed0eaece94e5ed681d1

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 7.3MB - Virtual size: 10.2MB

.sedata Size: 1.0MB - Virtual size: 1.0MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 20KB - Virtual size: 20KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 7.3MB - Virtual size: 10.2MB

.sedata
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 20KB - Virtual size: 20KB

.sedata
Size: 4KB - Virtual size: 4KB