66edf6ebee8ee4eebf5ec885312e59d53ea9283dcfaa33ba07948dee9f1c1cc0

Sharing

Copy URL Twitter E-mail

General

Target

66edf6ebee8ee4eebf5ec885312e59d53ea9283dcfaa33ba07948dee9f1c1cc0
Size

7.1MB
MD5

062a3a58c0117938ce3bc08ebe9409cf
SHA1

e2b80c6d44649b35fc2d2f0dd5243baf47d03844
SHA256

66edf6ebee8ee4eebf5ec885312e59d53ea9283dcfaa33ba07948dee9f1c1cc0
SHA512

84ce93b4a823249f6b73b63a93c8f7cef30d5e0910a37d6731637f0c7a65c07b72e5be3d8c9cfe2d6227d8f68beffa22e45160579ac817a05ebb949dbd6858a1
SSDEEP

196608:W8GgyYQQ7WrkSUcg/U50c445WODQK+HtHKPhDx:WVgQQ0DUcwIdd5DR3hD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66edf6ebee8ee4eebf5ec885312e59d53ea9283dcfaa33ba07948dee9f1c1cc0

Files

66edf6ebee8ee4eebf5ec885312e59d53ea9283dcfaa33ba07948dee9f1c1cc0
.exe windows:5 windows x86 arch:x86

878a47716c60bc035a857b8db6fc9ec3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

htons

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DestroyAcceleratorTable

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 803KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xBC
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.)Z{
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mjr
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

878a47716c60bc035a857b8db6fc9ec3

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 803KB

.rdata Size: - Virtual size: 126KB

.data Size: - Virtual size: 1.1MB

.xBC Size: - Virtual size: 4.0MB

.)Z{ Size: 4KB - Virtual size: 2KB

.mjr Size: 7.1MB - Virtual size: 7.1MB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: - Virtual size: 803KB

.rdata
Size: - Virtual size: 126KB

.data
Size: - Virtual size: 1.1MB

.xBC
Size: - Virtual size: 4.0MB

.)Z{
Size: 4KB - Virtual size: 2KB

.mjr
Size: 7.1MB - Virtual size: 7.1MB

.rsrc
Size: 20KB - Virtual size: 18KB