b3dc390a7480e1ed3e229255c26f1f49b213c134ba4dcb6082e9971de75dfda0

Sharing

Copy URL

Twitter E-mail

General

Target

b3dc390a7480e1ed3e229255c26f1f49b213c134ba4dcb6082e9971de75dfda0
Size

1.6MB
MD5

aa3cc84c05df823ca177f83479dd4a1b
SHA1

ca725482b372f0f958a8c0b4236c61734dfba341
SHA256

b3dc390a7480e1ed3e229255c26f1f49b213c134ba4dcb6082e9971de75dfda0
SHA512

d2804d49af3bb108abac4321d2d0578d134c2035999a795b9d8972a7a5cacbb5deb97b94b26bba83e943e7c407813d9335f27a923be2b90d63d8718db30e11fb
SSDEEP

24576:qTzJXe3wqABJrEqEuEMw+WFCEuwArzplBkRTKPBlWLYB2wdmnQtkjTfNMybCydfs:nGJ1EuL/OA3psUlWsXuQyjTlM+Cyds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3dc390a7480e1ed3e229255c26f1f49b213c134ba4dcb6082e9971de75dfda0

Files

b3dc390a7480e1ed3e229255c26f1f49b213c134ba4dcb6082e9971de75dfda0
.exe windows:4 windows x86 arch:x86

d5c01f81e54f0971c89a7dfab591282c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamStop

ws2_32

WSAAsyncSelect

kernel32

GetVersion

user32

GetClassInfoA

gdi32

ExcludeClipRect

msimg32

GradientFill

winspool.drv

ClosePrinter

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VarDateFromStr

comctl32

ImageList_GetImageInfo

wldap32

ord29

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 596KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5c01f81e54f0971c89a7dfab591282c

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wldap32

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: 596KB - Virtual size: 1.6MB

.sedata Size: 1.0MB - Virtual size: 1.0MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 12KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 596KB - Virtual size: 1.6MB

.sedata
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 12KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB