6e8416ce69b42bc1aef7bbbe75f415d6831251ed3d95f37e238492650740a7b0

Sharing

Copy URL Twitter E-mail

General

Target

6e8416ce69b42bc1aef7bbbe75f415d6831251ed3d95f37e238492650740a7b0
Size

10.5MB
MD5

b68fc57d77cd0cf4bd11dc96d694ec08
SHA1

01e33aaedb5f978c14b62acdc930a4362c64566c
SHA256

6e8416ce69b42bc1aef7bbbe75f415d6831251ed3d95f37e238492650740a7b0
SHA512

16c7383a620395e01b94330c118f3bca483d319f1f4a49639a3d63422f4991341ff2b486994deebf3b8a032d8cfa95139bbfab860227425266ee5fbdf14b1a18
SSDEEP

196608:wHCmW+JN6axKTyT6z7P3j3Has73Jlem57QBgn7qyv7jQ1ChlEzIVV:wHC2JN6fTyTk7Tay3Jl57QineyfQwhkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e8416ce69b42bc1aef7bbbe75f415d6831251ed3d95f37e238492650740a7b0

Files

6e8416ce69b42bc1aef7bbbe75f415d6831251ed3d95f37e238492650740a7b0
.exe windows:5 windows x86 arch:x86

43ddd0855736d035fbd1d048b5c46910

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamStop

ws2_32

accept

version

VerLanguageNameA

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

LoadStringA
CharUpperBuffW

gdi32

FillRgn

msimg32

GradientFill

winspool.drv

OpenPrinterA

comdlg32

GetSaveFileNameA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayCreate

comctl32

ImageList_DragLeave

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 774KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.).V
Size: - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.-a7
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lJm
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43ddd0855736d035fbd1d048b5c46910

Headers

File Characteristics

Imports

winmm

ws2_32

version

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Exports

Exports

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 1.3MB

.data Size: - Virtual size: 774KB

.).V Size: - Virtual size: 6.9MB

.-a7 Size: 4KB - Virtual size: 2KB

.lJm Size: 10.4MB - Virtual size: 10.4MB

.rsrc Size: 72KB - Virtual size: 68KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 1.3MB

.data
Size: - Virtual size: 774KB

.).V
Size: - Virtual size: 6.9MB

.-a7
Size: 4KB - Virtual size: 2KB

.lJm
Size: 10.4MB - Virtual size: 10.4MB

.rsrc
Size: 72KB - Virtual size: 68KB