1a056f3306de7430a882c5eea2c9f2363a602ca12dfa86d4b408430961dfe482

Sharing

Copy URL Twitter E-mail

General

Target

1a056f3306de7430a882c5eea2c9f2363a602ca12dfa86d4b408430961dfe482
Size

10.3MB
MD5

5b803caaa8a8a02498f025567fc7873f
SHA1

fbb21f85dfd83fb2e19d6b288b10942497a824a4
SHA256

1a056f3306de7430a882c5eea2c9f2363a602ca12dfa86d4b408430961dfe482
SHA512

ccaf8252d3d3fd9fa360e24c539fb9c314470c73d12bb6064ba1a77697f8936897af4e4999050ba6b7cddb88da523d48520bcfd7fe05bd3b8a5ecb5dcae325b9
SSDEEP

196608:4bi8+KwWOv+Zbzx1+Ir5k/CR8j9MW/03Pq6V61aXfec25:4bkKmEx1Y1pOV61aXfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a056f3306de7430a882c5eea2c9f2363a602ca12dfa86d4b408430961dfe482

Files

1a056f3306de7430a882c5eea2c9f2363a602ca12dfa86d4b408430961dfe482
.exe windows:5 windows x86 arch:x86

06087d3590035b100a928d7d5e32f331

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CallWindowProcA
IsRectEmpty

kernel32

GetVersion
GetVersionExA
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

DeleteDC
DPtoLP

gdiplus

GdipDeletePen

ole32

CreateStreamOnHGlobal

imm32

ImmReleaseContext

shell32

ShellExecuteA
DragFinish

shlwapi

PathFileExistsA

winmm

PlaySoundA
midiOutPrepareHeader

rasapi32

RasGetConnectStatusA

ws2_32

WSAAsyncSelect

winspool.drv

OpenPrinterA

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA

oleaut32

UnRegisterTypeLi

comctl32

ord17

wininet

FtpGetFileA

Sections

.text
Size: - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 747KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

utyjktyu
Size: - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

utyjktyu
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

utyjktyu
Size: 10.3MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06087d3590035b100a928d7d5e32f331

Headers

File Characteristics

Imports

user32

kernel32

gdi32

gdiplus

ole32

imm32

shell32

shlwapi

winmm

rasapi32

ws2_32

winspool.drv

comdlg32

advapi32

oleaut32

comctl32

wininet

Sections

.text Size: - Virtual size: 3.4MB

.rdata Size: - Virtual size: 1.7MB

.data Size: - Virtual size: 747KB

utyjktyu Size: - Virtual size: 5.3MB

utyjktyu Size: 4KB - Virtual size: 3KB

utyjktyu Size: 10.3MB - Virtual size: 10.3MB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: - Virtual size: 3.4MB

.rdata
Size: - Virtual size: 1.7MB

.data
Size: - Virtual size: 747KB

utyjktyu
Size: - Virtual size: 5.3MB

utyjktyu
Size: 4KB - Virtual size: 3KB

utyjktyu
Size: 10.3MB - Virtual size: 10.3MB

.rsrc
Size: 20KB - Virtual size: 19KB