ac8133a834157fa161fcce7e8b795b812a6cc2a31293fe6574497eb76b1ae0a9

Sharing

Copy URL Twitter E-mail

General

Target

ac8133a834157fa161fcce7e8b795b812a6cc2a31293fe6574497eb76b1ae0a9
Size

12.1MB
MD5

8ab32473724420e2b06ef2dd839c0b89
SHA1

af571a583e8875ae91b6be3ef74a5d9e80f02809
SHA256

ac8133a834157fa161fcce7e8b795b812a6cc2a31293fe6574497eb76b1ae0a9
SHA512

ac63d9e76c9765a139f67573957e217e0185a711233a46e8a9a8c46c51032537b6685d66f8a2d0efd88a97900dfaee652dabe7d87b2346c571e77fc864a6be12
SSDEEP

393216:6VpftOYpZzjtGPyramKRK5UF0VdWm2SB:6302HtG8KRK5UF0HT2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac8133a834157fa161fcce7e8b795b812a6cc2a31293fe6574497eb76b1ae0a9

Files

ac8133a834157fa161fcce7e8b795b812a6cc2a31293fe6574497eb76b1ae0a9
.exe windows:5 windows x86 arch:x86

63b3e962b7163d891f84cf6f252f8970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

send

version

VerLanguageNameA

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

PeekMessageA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.:[l
Size: - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.=V=
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.)GX
Size: 12.1MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63b3e962b7163d891f84cf6f252f8970

Headers

File Characteristics

Imports

winmm

ws2_32

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 1.5MB

.rdata Size: - Virtual size: 4.2MB

.data Size: - Virtual size: 381KB

.:[l Size: - Virtual size: 6.2MB

.=V= Size: 4KB - Virtual size: 2KB

.)GX Size: 12.1MB - Virtual size: 12.1MB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: - Virtual size: 1.5MB

.rdata
Size: - Virtual size: 4.2MB

.data
Size: - Virtual size: 381KB

.:[l
Size: - Virtual size: 6.2MB

.=V=
Size: 4KB - Virtual size: 2KB

.)GX
Size: 12.1MB - Virtual size: 12.1MB

.rsrc
Size: 16KB - Virtual size: 12KB