4a340a0a95f2af5ab7f3bfe6f304154e617d0c47ce31ee8426c70b86e195320c

Sharing

Copy URL Twitter E-mail

General

Target

4a340a0a95f2af5ab7f3bfe6f304154e617d0c47ce31ee8426c70b86e195320c
Size

1.7MB
MD5

fac356509a156a8f11ce69f149198108
SHA1

66b0d9b10c2898d388bdfd2be4a66ac76d5822f4
SHA256

4a340a0a95f2af5ab7f3bfe6f304154e617d0c47ce31ee8426c70b86e195320c
SHA512

80560ac860c9f7d2ee086f617af4a42c9034dd07c1e52ea648adb342dc827249288edc3cc6770587cc6369e1d62e3ee476a9331a78df129b3d10bbcb9fb8c1ad
SSDEEP

49152:xo+xxKg8LzENUQB3QLZpUrezFSrnXxjQV:xo/g8Lzi3+HPoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a340a0a95f2af5ab7f3bfe6f304154e617d0c47ce31ee8426c70b86e195320c

Files

4a340a0a95f2af5ab7f3bfe6f304154e617d0c47ce31ee8426c70b86e195320c
.exe windows:5 windows x86 arch:x86

1294716eca770ed163f79ee60bf75c93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayCreate

advapi32

RegDeleteKeyW

user32

ShowScrollBar

kernel32

GetVersion
GetVersionExW
GetVersion
CreateEventW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msimg32

AlphaBlend

gdi32

CreateICW

version

GetFileVersionInfoSizeW

ole32

OleUninitialize

comctl32

FlatSB_GetScrollInfo

winspool.drv

GetDefaultPrinterW

Sections

.text
Size: - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 23KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.upx0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.upx1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1294716eca770ed163f79ee60bf75c93

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

winspool.drv

Sections

.text Size: - Virtual size: 804KB

.itext Size: - Virtual size: 3KB

.data Size: - Virtual size: 10KB

.bss Size: - Virtual size: 23KB

.idata Size: - Virtual size: 12KB

.didata Size: - Virtual size: 806B

.tls Size: - Virtual size: 60B

.rdata Size: - Virtual size: 24B

.upx0 Size: - Virtual size: 1.4MB

.upx1 Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 512B - Virtual size: 304B

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: - Virtual size: 804KB

.itext
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 10KB

.bss
Size: - Virtual size: 23KB

.idata
Size: - Virtual size: 12KB

.didata
Size: - Virtual size: 806B

.tls
Size: - Virtual size: 60B

.rdata
Size: - Virtual size: 24B

.upx0
Size: - Virtual size: 1.4MB

.upx1
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 512B - Virtual size: 304B

.rsrc
Size: 5KB - Virtual size: 5KB