eb986477dcae16bd1e943a528c6fe97c4d5f73a0a56803accf79daf227d0e713

Sharing

Copy URL Twitter E-mail

General

Target

eb986477dcae16bd1e943a528c6fe97c4d5f73a0a56803accf79daf227d0e713
Size

14.8MB
MD5

1a123466f5b166056b8632b24a51bc75
SHA1

c619fa6b86af8fcb983673d89aa457a02fd7dc64
SHA256

eb986477dcae16bd1e943a528c6fe97c4d5f73a0a56803accf79daf227d0e713
SHA512

b351d78109c8c604f8c286a75153ceaf0d344e29ad0aef2415030f89cc3c77649e2180584f49bb1e2745efd112994febc070c297d2dc88c7fd39ba37c05ed02c
SSDEEP

393216:QJXAqK4DZJi/MLP+WLnZiQb86FGGas+boC1yytcoa:Ql7tDZ8/22W7vbXFks+b31y4R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb986477dcae16bd1e943a528c6fe97c4d5f73a0a56803accf79daf227d0e713

Files

eb986477dcae16bd1e943a528c6fe97c4d5f73a0a56803accf79daf227d0e713
.exe windows:4 windows x86 arch:x86

e99b1520bef46f273f3d1c95c6bb24b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow

kernel32

GetVersionExA
GetVersion
GetVersionExA
GetVersion
GetTickCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

RealizePalette

ws2_32

ntohs

atl

ord42

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

comctl32

ImageList_GetImageInfo

oledlg

ord8

ole32

OleUninitialize

oleaut32

SafeArrayGetUBound

winmm

waveOutUnprepareHeader

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

rasapi32

RasGetConnectStatusA

comdlg32

ChooseColorA

shell32

SHGetSpecialFolderPathA

wininet

InternetSetOptionA

Sections

.text
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 12.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 881KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.my0
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.my1
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e99b1520bef46f273f3d1c95c6bb24b9

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ws2_32

atl

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

winmm

msvfw32

avifil32

rasapi32

comdlg32

shell32

wininet

Sections

.text Size: - Virtual size: 2.9MB

.rdata Size: - Virtual size: 12.3MB

.data Size: - Virtual size: 881KB

.my0 Size: - Virtual size: 3.6MB

.my1 Size: 14.7MB - Virtual size: 14.7MB

.rsrc Size: 72KB - Virtual size: 95KB

.text
Size: - Virtual size: 2.9MB

.rdata
Size: - Virtual size: 12.3MB

.data
Size: - Virtual size: 881KB

.my0
Size: - Virtual size: 3.6MB

.my1
Size: 14.7MB - Virtual size: 14.7MB

.rsrc
Size: 72KB - Virtual size: 95KB