b1ed228e61a5d8e21513b574f65343a77c9fac8718a12a59951b37493a6c012f

Sharing

Copy URL Twitter E-mail

General

Target

b1ed228e61a5d8e21513b574f65343a77c9fac8718a12a59951b37493a6c012f
Size

1.3MB
MD5

b5e6e5fd91fc4cf0f31f497ff7696d39
SHA1

0ba80f5c3667f5cc123148455010f543d913efd6
SHA256

b1ed228e61a5d8e21513b574f65343a77c9fac8718a12a59951b37493a6c012f
SHA512

7bfabef30c0bcec50a663ac21752bc739dba50731d7015347c284d2407366a1ddf87dbc85531452d0ff927921184a5c33273429cff22423985a22a52f007c79b
SSDEEP

24576:zWcrj2i/eei/n2oLS5dFykDGiy8ZZWzzo2yMnT5LWApmqaMZNplWfubTevl/NrjZ:icjeei/2oz2lBDezaMF6qnpMqTEZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1ed228e61a5d8e21513b574f65343a77c9fac8718a12a59951b37493a6c012f

Files

b1ed228e61a5d8e21513b574f65343a77c9fac8718a12a59951b37493a6c012f
.exe windows:5 windows x86 arch:x86

54aa47015b10f9da93a62eca4ded85d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

EnumClipboardFormats

gdi32

GetTextColor

winmm

waveOutOpen

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

accept

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 878KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54aa47015b10f9da93a62eca4ded85d8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 566KB

CODE Size: - Virtual size: 34KB

.rdata Size: - Virtual size: 346KB

.data Size: - Virtual size: 227KB

DATA Size: - Virtual size: 1KB

BSS Size: - Virtual size: 22KB

.vmp0 Size: - Virtual size: 878KB

.vmp1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: - Virtual size: 566KB

CODE
Size: - Virtual size: 34KB

.rdata
Size: - Virtual size: 346KB

.data
Size: - Virtual size: 227KB

DATA
Size: - Virtual size: 1KB

BSS
Size: - Virtual size: 22KB

.vmp0
Size: - Virtual size: 878KB

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 8KB - Virtual size: 7KB