0f1460aa5e26301277bea17a624bd2c75ccb20fd5e32c4decd29f298429b6040

Sharing

Copy URL Twitter E-mail

General

Target

0f1460aa5e26301277bea17a624bd2c75ccb20fd5e32c4decd29f298429b6040
Size

13.2MB
MD5

6c9ffb62c54536f92bb6d7e3728cade0
SHA1

9985e728b5bda6f6bd1d3c38bd1dbdd2e69a802b
SHA256

0f1460aa5e26301277bea17a624bd2c75ccb20fd5e32c4decd29f298429b6040
SHA512

ef4a0eafcf208620b339025bef549c86a43875095e10b60d445a6239a9142398efc12f57af0b543eddda82b34ec57a160c4cd26d6483d46f3b98bd1393d98df4
SSDEEP

196608:gW9RIdMR2Czyf7VKyto/gWSsrzD+M4c9BDal88sfu2K6JlsRK87:/Ydk47IZtSs+c9sZaJSRX7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f1460aa5e26301277bea17a624bd2c75ccb20fd5e32c4decd29f298429b6040

Files

0f1460aa5e26301277bea17a624bd2c75ccb20fd5e32c4decd29f298429b6040
.exe windows:4 windows x86 arch:x86

cd0465bd9baaa700d0ef0ec1f9a53947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

winmm

midiStreamOut

ws2_32

inet_ntoa

user32

GetSysColorBrush

gdi32

CombineRgn

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemAlloc

oleaut32

VariantCopyInd

comctl32

ImageList_DragMove

secur32

GetUserNameExA

wininet

DeleteUrlCacheEntryW

urlmon

URLDownloadToFileW

shlwapi

StrTrimA

iphlpapi

GetAdaptersInfo

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo2
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd0465bd9baaa700d0ef0ec1f9a53947

Headers

File Characteristics

Imports

kernel32

msvfw32

avifil32

winmm

ws2_32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

secur32

wininet

urlmon

shlwapi

iphlpapi

Exports

Exports

Sections

.text Size: - Virtual size: 9.8MB

.mapo Size: 7.2MB - Virtual size: 7.2MB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.mapo Size: 148KB - Virtual size: 148KB

.mapo2 Size: 2.9MB - Virtual size: 2.9MB

.text
Size: - Virtual size: 9.8MB

.mapo
Size: 7.2MB - Virtual size: 7.2MB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

.mapo
Size: 148KB - Virtual size: 148KB

.mapo2
Size: 2.9MB - Virtual size: 2.9MB