5488492421a202dc0bae178ca2b86db9d973e0c99297b485f1e23d7297fb637b

Sharing

Copy URL Twitter E-mail

General

Target

5488492421a202dc0bae178ca2b86db9d973e0c99297b485f1e23d7297fb637b
Size

8.5MB
MD5

6368fc5715087b486626e64fdf6da20b
SHA1

145ecee9778bada6d8eea6c40643177c15c4796b
SHA256

5488492421a202dc0bae178ca2b86db9d973e0c99297b485f1e23d7297fb637b
SHA512

3c5387c073f77397b924cde2db51bcbcb2434afb73b92e4cee63e4e8bcd15e1c4dfa87c1a32c2293645da214c1c23cea4d8fc012412c5dfda47596451ebefb31
SSDEEP

196608:Fyprn3E2KQinMpAb0KIwl1imOBGZFqRg/7TPOVWA:FyhE2KlnaAIV8iJ2zQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5488492421a202dc0bae178ca2b86db9d973e0c99297b485f1e23d7297fb637b

Files

5488492421a202dc0bae178ca2b86db9d973e0c99297b485f1e23d7297fb637b
.exe windows:5 windows x86 arch:x86

e3aef4f37cfbd0051a41e4dfc894d998

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

PeekMessageA
CharUpperBuffW

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 13.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!A8
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.VP@
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e7M
Size: 8.5MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3aef4f37cfbd0051a41e4dfc894d998

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 513KB

.rdata Size: - Virtual size: 13.9MB

.data Size: - Virtual size: 232KB

.!A8 Size: - Virtual size: 3.8MB

.VP@ Size: 4KB - Virtual size: 2KB

.e7M Size: 8.5MB - Virtual size: 8.4MB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: - Virtual size: 513KB

.rdata
Size: - Virtual size: 13.9MB

.data
Size: - Virtual size: 232KB

.!A8
Size: - Virtual size: 3.8MB

.VP@
Size: 4KB - Virtual size: 2KB

.e7M
Size: 8.5MB - Virtual size: 8.4MB

.rsrc
Size: 16KB - Virtual size: 12KB