db4b528c78666bcc8feeb6622207dbf856db259db055b8e92257d63da5118a87[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

db4b528c78666bcc8feeb6622207dbf856db259db055b8e92257d63da5118a87.exe
Size

20.1MB
MD5

3ef97e69a4c36ab5dc588a8aca155241
SHA1

b997d602ef27288abec9c1c56370add7548ecf68
SHA256

db4b528c78666bcc8feeb6622207dbf856db259db055b8e92257d63da5118a87
SHA512

7054d6e84d55eadeb4051b61473131745db8f5e6fff3c50ccb0dd51f7220eb4a95b235958177fecf3cd98f2d6b4b9f8f303baca492635e4ea069008382dbe820
SSDEEP

393216:uUvWFI8ElR4WQXthDeUS+3jGSO3++xYRnr7qyS13Q2xTH:u2gI8Elw7r7SL+b97qyS1HxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db4b528c78666bcc8feeb6622207dbf856db259db055b8e92257d63da5118a87.exe

Files

db4b528c78666bcc8feeb6622207dbf856db259db055b8e92257d63da5118a87.exe
.exe windows:5 windows x86 arch:x86

50a859a927074f56e927a52a7dc64adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

advapi32

RegQueryValueExW
RegUnLoadKeyW

user32

CharNextW
SetClassLongW
EnumDisplayMonitors

kernel32

GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep

gdi32

UnrealizeObject

version

VerQueryValueW

netapi32

NetApiBufferFree

ole32

CreateStreamOnHGlobal

comctl32

InitializeFlatSB

msvcrt

memset

shell32

Shell_NotifyIconW
SHGetFolderPathW

winspool.drv

OpenPrinterW
GetDefaultPrinterW

winhttp

WinHttpWriteData

winmm

timeGetTime

Exports

Exports

TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 155B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

."Bx
Size: - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. f5
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: - Virtual size: 17.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

. "f
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.k*4
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.-r}
Size: 20.1MB - Virtual size: 20.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50a859a927074f56e927a52a7dc64adf

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

netapi32

ole32

comctl32

msvcrt

shell32

winspool.drv

winhttp

winmm

Exports

Exports

Sections

.text Size: - Virtual size: 4.0MB

.itext Size: - Virtual size: 14KB

.data Size: - Virtual size: 75KB

.bss Size: - Virtual size: 27KB

.idata Size: - Virtual size: 15KB

.didata Size: - Virtual size: 3KB

.edata Size: - Virtual size: 155B

.tls Size: - Virtual size: 80B

.rdata Size: - Virtual size: 92B

."Bx Size: - Virtual size: 353KB

. f5 Size: - Virtual size: 5.4MB

.debug Size: - Virtual size: 17.9MB

. "f Size: - Virtual size: 8.2MB

.k*4 Size: 512B - Virtual size: 300B

.-r} Size: 20.1MB - Virtual size: 20.1MB

.rsrc Size: 69KB - Virtual size: 68KB

.text
Size: - Virtual size: 4.0MB

.itext
Size: - Virtual size: 14KB

.data
Size: - Virtual size: 75KB

.bss
Size: - Virtual size: 27KB

.idata
Size: - Virtual size: 15KB

.didata
Size: - Virtual size: 3KB

.edata
Size: - Virtual size: 155B

.tls
Size: - Virtual size: 80B

.rdata
Size: - Virtual size: 92B

."Bx
Size: - Virtual size: 353KB

. f5
Size: - Virtual size: 5.4MB

.debug
Size: - Virtual size: 17.9MB

. "f
Size: - Virtual size: 8.2MB

.k*4
Size: 512B - Virtual size: 300B

.-r}
Size: 20.1MB - Virtual size: 20.1MB

.rsrc
Size: 69KB - Virtual size: 68KB