b319796369b26f9baf7443a4d021a5e6b9d5a6ebf91edfcc4f6dc2b2e34a61e6

Sharing

Copy URL Twitter E-mail

General

Target

b319796369b26f9baf7443a4d021a5e6b9d5a6ebf91edfcc4f6dc2b2e34a61e6
Size

5.0MB
MD5

f9dadf1cd54517af82d233b35459c590
SHA1

70233f89fea226cb35d649b8cca625edc7568743
SHA256

b319796369b26f9baf7443a4d021a5e6b9d5a6ebf91edfcc4f6dc2b2e34a61e6
SHA512

9661a9571d8837ac09137806ca44d260c083aff8812bf03854de4e7ea669c0de2cfecd96b66e5fc9b0db06374726e9e024868cbb7bd00920f598b1ae5f4e5917
SSDEEP

98304:gNPPO4ILqFy9Ht9GwuJcVIGHOyDZtMo7bnLci+960dI226pFx/q:gReLq4bLVI+O0ZtMof9+c022W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b319796369b26f9baf7443a4d021a5e6b9d5a6ebf91edfcc4f6dc2b2e34a61e6

Files

b319796369b26f9baf7443a4d021a5e6b9d5a6ebf91edfcc4f6dc2b2e34a61e6
.exe windows:4 windows x86 arch:x86

723ff9073edbb9400444c2977fd49fbe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

aquarius2

?CreateAsChildWindow@ProxyBase@@SA?AV?$shrewd_ptr@VProxyWindowInfo@@@prime@@HHHHH@Z

winmm

midiOutPrepareHeader

ws2_32

ioctlsocket

rasapi32

RasHangUpA

kernel32

TlsGetValue

user32

CreateWindowExA

gdi32

LineTo

msimg32

GradientFill

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SysAllocStringLen

comctl32

ImageList_GetIcon

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 3.9MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

723ff9073edbb9400444c2977fd49fbe

Headers

File Characteristics

Imports

aquarius2

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 3.9MB - Virtual size: 4.8MB

.sedata Size: 1.1MB - Virtual size: 1.1MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 3.9MB - Virtual size: 4.8MB

.sedata
Size: 1.1MB - Virtual size: 1.1MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB