5c03ccdef1f303944c17d8820a925ec7a5b1446529124de63b18a4c41636be6d

Sharing

Copy URL

Twitter E-mail

General

Target

5c03ccdef1f303944c17d8820a925ec7a5b1446529124de63b18a4c41636be6d
Size

11.4MB
MD5

f5007cfc7fc623fb0c7100d2bb75206d
SHA1

5e35e0346e34a982983c3f6442ac63a91cb1c3d1
SHA256

5c03ccdef1f303944c17d8820a925ec7a5b1446529124de63b18a4c41636be6d
SHA512

1dbf720b49136a95e41fa668c26d9c2130ce12d801c1bc1a4dae6cc5536838c98d5c34c242cdf9873c3500d48461dc771ce98df6e7bf2e26cac6b36c12602833
SSDEEP

196608:fP1OrCLgSS8mRJJsItuXhBKjVtiV/NFy2L5JEwhyS+7JITnZZq+iOiVmfvP:H1OrCESVYJBtWGjVtiV/NEi5JEwhywZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c03ccdef1f303944c17d8820a925ec7a5b1446529124de63b18a4c41636be6d

Files

5c03ccdef1f303944c17d8820a925ec7a5b1446529124de63b18a4c41636be6d
.exe windows:5 windows x86 arch:x86

b884d13a957d4870d37550e7bfb7b533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

recvfrom

rasapi32

RasHangUpA

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetSysColorBrush

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ImageList_GetImageCount

wininet

InternetCloseHandle

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 711KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 919KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSHK0
Size: - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.MSHK1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSHK2
Size: 11.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b884d13a957d4870d37550e7bfb7b533

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 711KB

.rdata Size: - Virtual size: 919KB

.data Size: - Virtual size: 376KB

.MSHK0 Size: - Virtual size: 6.2MB

.MSHK1 Size: 4KB - Virtual size: 2KB

.MSHK2 Size: 11.4MB - Virtual size: 11.4MB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: - Virtual size: 711KB

.rdata
Size: - Virtual size: 919KB

.data
Size: - Virtual size: 376KB

.MSHK0
Size: - Virtual size: 6.2MB

.MSHK1
Size: 4KB - Virtual size: 2KB

.MSHK2
Size: 11.4MB - Virtual size: 11.4MB

.rsrc
Size: 8KB - Virtual size: 5KB