4eb2802f96d70ec93305de1fe81b6cfca11707ec42a55a0161a59803281a333e

Sharing

Copy URL Twitter E-mail

General

Target

4eb2802f96d70ec93305de1fe81b6cfca11707ec42a55a0161a59803281a333e
Size

15.3MB
MD5

9ceb58005bd05b4cc3b12f3f9f2901e9
SHA1

9aa19df939d65c8623f92dec0d174c733c8733bd
SHA256

4eb2802f96d70ec93305de1fe81b6cfca11707ec42a55a0161a59803281a333e
SHA512

3a307c8a5aff6355452e274f59f784f618f3976bb6522aaf84abadb9025746db0b107c8c20ab214349952d794ad9d4a1ae422352ae254954dcd3871cddec4d98
SSDEEP

393216:FamA2VMT8meSvavsyb5TBn57Mc36T68onLLQ/DP:xAEMYmeKa9Fdn5DvHuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eb2802f96d70ec93305de1fe81b6cfca11707ec42a55a0161a59803281a333e

Files

4eb2802f96d70ec93305de1fe81b6cfca11707ec42a55a0161a59803281a333e
.exe windows:4 windows x86 arch:x86

b157d9be3744cd26047d7c12b9d383f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

kernel32

GetEnvironmentStringsW

user32

LoadStringA

gdi32

SaveDC

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

DragQueryFileA

ole32

ReleaseStgMedium

oleaut32

LoadTypeLi

comctl32

_TrackMouseEvent

ws2_32

inet_ntoa

wldap32

ord29

Sections

.text
Size: - Virtual size: 618KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.svmp1
Size: - Virtual size: 3.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp2
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp5
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svmp6
Size: 428KB - Virtual size: 425KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b157d9be3744cd26047d7c12b9d383f3

Headers

File Characteristics

Imports

msvfw32

avifil32

kernel32

user32

gdi32

winmm

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

wldap32

Sections

.text Size: - Virtual size: 618KB

.rdata Size: - Virtual size: 7.8MB

.data Size: - Virtual size: 265KB

.rsrc Size: 32KB - Virtual size: 30KB

.svmp1 Size: - Virtual size: 3.8MB

.svmp2 Size: 6.5MB - Virtual size: 6.5MB

.svmp3 Size: 2.6MB - Virtual size: 2.6MB

.svmp4 Size: 5.8MB - Virtual size: 5.8MB

.svmp5 Size: 12KB - Virtual size: 10KB

.svmp6 Size: 428KB - Virtual size: 425KB

.text
Size: - Virtual size: 618KB

.rdata
Size: - Virtual size: 7.8MB

.data
Size: - Virtual size: 265KB

.rsrc
Size: 32KB - Virtual size: 30KB

.svmp1
Size: - Virtual size: 3.8MB

.svmp2
Size: 6.5MB - Virtual size: 6.5MB

.svmp3
Size: 2.6MB - Virtual size: 2.6MB

.svmp4
Size: 5.8MB - Virtual size: 5.8MB

.svmp5
Size: 12KB - Virtual size: 10KB

.svmp6
Size: 428KB - Virtual size: 425KB