3bda9aaaa89a9ef63d71e1b6d84d448b79ff42305b7ece74ed9897295029cfd6

Sharing

Copy URL Twitter E-mail

General

Target

3bda9aaaa89a9ef63d71e1b6d84d448b79ff42305b7ece74ed9897295029cfd6
Size

6.6MB
MD5

27c3fc105fdfc79e0eacdac939c91274
SHA1

b9dfa1a03bb081baf6b6bf555b35fcb9f9f0c747
SHA256

3bda9aaaa89a9ef63d71e1b6d84d448b79ff42305b7ece74ed9897295029cfd6
SHA512

468e0f931c53c4f7b1ebea7e97243eeca5cf38cf7633708d13f3416f9cfa8ad1e03512a458fe01fdabdd1774718f110fc458503f8ee51d207c5794bf73777295
SSDEEP

98304:dhGl/1KI9lrHgVIPlxoamdUD+R9eKXwsRfh+EW/315vCn1IWqkLegzuLDR2wfeSk:uBvrAw+FSD+fTyX3aNXL6FS2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bda9aaaa89a9ef63d71e1b6d84d448b79ff42305b7ece74ed9897295029cfd6

Files

3bda9aaaa89a9ef63d71e1b6d84d448b79ff42305b7ece74ed9897295029cfd6
.exe windows:5 windows x86 arch:x86

ec1d5d94b3be282d10229efcf553f6e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

kernel32

GetVersionExA
GetVersion
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

EmptyClipboard
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

gdi32

SetWindowExtEx

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantCopy

comctl32

ImageList_DragShowNolock

ws2_32

ntohl

wininet

InternetReadFile

comdlg32

GetSaveFileNameA

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 873KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 8.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps0
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmps1
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec1d5d94b3be282d10229efcf553f6e3

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wininet

comdlg32

wtsapi32

Sections

.text Size: - Virtual size: 873KB

.rdata Size: - Virtual size: 8.6MB

.data Size: - Virtual size: 310KB

.vmps0 Size: - Virtual size: 2.7MB

.vmps1 Size: 6.6MB - Virtual size: 6.6MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 873KB

.rdata
Size: - Virtual size: 8.6MB

.data
Size: - Virtual size: 310KB

.vmps0
Size: - Virtual size: 2.7MB

.vmps1
Size: 6.6MB - Virtual size: 6.6MB

.rsrc
Size: 8KB - Virtual size: 6KB