f582081c8f1f0e4ada73626503b248fb7df9291cf0b5758597e1d19e7abb3935

Sharing

Copy URL Twitter E-mail

General

Target

f582081c8f1f0e4ada73626503b248fb7df9291cf0b5758597e1d19e7abb3935
Size

7.3MB
MD5

8c9d8193808dd64f7b8a35bf19c8731d
SHA1

c617e6b5704bebf70fdab489e0cd4e95159355e9
SHA256

f582081c8f1f0e4ada73626503b248fb7df9291cf0b5758597e1d19e7abb3935
SHA512

6cee6898fd551bacf9f4a81ca9571c091fdeea93a733fcd865f7334d2764db4fd8ea0fe6f545cfd491bddc211f1ff92204e4d536cbdf8b83603e143b4b3b04b6
SSDEEP

196608:XKvrLzIt7tiRQmDW9NH5cYCuoCEQqzTYTftMfxrQwJDUvkQVOBYnt:X0LUt7tkQqg4uOJzTcM5r5UvVLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f582081c8f1f0e4ada73626503b248fb7df9291cf0b5758597e1d19e7abb3935

Files

f582081c8f1f0e4ada73626503b248fb7df9291cf0b5758597e1d19e7abb3935
.exe windows:5 windows x86 arch:x86

beba091fc0914291122796ece0eef446

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

g:\projects\funny\publish\jsqmj_free.pdb

Imports

kernel32

GetVersionExA
GetThreadContext
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetMessageTime

gdi32

SetBkColor

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA

advapi32

OpenSCManagerA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal

oleaut32

VariantChangeType

ws2_32

WSAEnumNetworkEvents

wininet

InternetOpenA

winmm

mciSendStringA

Sections

.text
Size: - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data30
Size: - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data31
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

beba091fc0914291122796ece0eef446

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

winmm

Sections

.text Size: - Virtual size: 373KB

.rdata Size: - Virtual size: 88KB

.data Size: - Virtual size: 40KB

.data30 Size: - Virtual size: 7.2MB

.data31 Size: 7.1MB - Virtual size: 7.1MB

.reloc Size: 512B - Virtual size: 116B

.rsrc Size: 200KB - Virtual size: 200KB

.text
Size: - Virtual size: 373KB

.rdata
Size: - Virtual size: 88KB

.data
Size: - Virtual size: 40KB

.data30
Size: - Virtual size: 7.2MB

.data31
Size: 7.1MB - Virtual size: 7.1MB

.reloc
Size: 512B - Virtual size: 116B

.rsrc
Size: 200KB - Virtual size: 200KB