4c0ab8535cd8e445a60035a5c51807d052c8aabce9f736ec0b98e3ffc754dac9

Sharing

Copy URL Twitter E-mail

General

Target

4c0ab8535cd8e445a60035a5c51807d052c8aabce9f736ec0b98e3ffc754dac9
Size

9.4MB
MD5

95cb63b856e57d1734913c59a01c445e
SHA1

7da6ca2e12981f63babd106a09f69ad0075ba938
SHA256

4c0ab8535cd8e445a60035a5c51807d052c8aabce9f736ec0b98e3ffc754dac9
SHA512

5cb3c1dcd281a003beed6968fbb352d7d763613f253aac06a888a9e0da931f0edadddc0ea58fc20599f9645154f0a404cf984cf196bf336597ab5cee667fbe0b
SSDEEP

196608:eBDnUSLpPFW+Gk8wE6Cocq/HcWbCDRLJrR+U8w:e5/LpkLw1kqEWb6r/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0ab8535cd8e445a60035a5c51807d052c8aabce9f736ec0b98e3ffc754dac9

Files

4c0ab8535cd8e445a60035a5c51807d052c8aabce9f736ec0b98e3ffc754dac9
.exe windows:5 windows x86 arch:x86

c409a3b477a4f9777d763e955118a4e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuItemCount
GrayStringA

kernel32

GetVersion
GetVersionExA
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

gdi32

ScaleViewportExtEx
GetROP2

ws2_32

setsockopt
ntohl

atl

ord42

winspool.drv

ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA

comctl32

ord17
ImageList_Destroy

oledlg

ord8

ole32

OleRun

oleaut32

SafeArrayDestroy
UnRegisterTypeLi

winmm

waveOutGetNumDevs

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 855KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps0
Size: - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmps1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmps2
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c409a3b477a4f9777d763e955118a4e6

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ws2_32

atl

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

winmm

shell32

comdlg32

Sections

.text Size: - Virtual size: 855KB

.rdata Size: - Virtual size: 219KB

.data Size: - Virtual size: 442KB

.vmps0 Size: - Virtual size: 5.0MB

.vmps1 Size: 4KB - Virtual size: 3KB

.vmps2 Size: 9.4MB - Virtual size: 9.4MB

.rsrc Size: 24KB - Virtual size: 34KB

.text
Size: - Virtual size: 855KB

.rdata
Size: - Virtual size: 219KB

.data
Size: - Virtual size: 442KB

.vmps0
Size: - Virtual size: 5.0MB

.vmps1
Size: 4KB - Virtual size: 3KB

.vmps2
Size: 9.4MB - Virtual size: 9.4MB

.rsrc
Size: 24KB - Virtual size: 34KB