1371c99e4ca112b4a45d55fc7440dae6c3e663af6c9490b38ef1282b25391ee7

Sharing

Copy URL Twitter E-mail

General

Target

1371c99e4ca112b4a45d55fc7440dae6c3e663af6c9490b38ef1282b25391ee7
Size

10.7MB
MD5

758b91afc1fd4b075b2b6ee319a8bad5
SHA1

fce07d8f2477fdc0d6d3bd83bd9cd5b7ecc6928b
SHA256

1371c99e4ca112b4a45d55fc7440dae6c3e663af6c9490b38ef1282b25391ee7
SHA512

62deb14076e4d93fc4e63701694a9421d5e5ac3249be1c0b4c7475e3efec2317757c13329968c69c58bc1266be32a2d11579b047332c09a405edaf0b61908433
SSDEEP

196608:O9Mj6WEEej8+YyBGtt3C7QqMZXwLz9dZ3CX6ucyVTzuvS7ZHDRZa1TniO0hOZDSf:O9MTcjBJkXbXoz9K6ryVea9FZmniO0U7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1371c99e4ca112b4a45d55fc7440dae6c3e663af6c9490b38ef1282b25391ee7

Files

1371c99e4ca112b4a45d55fc7440dae6c3e663af6c9490b38ef1282b25391ee7
.exe windows:5 windows x86 arch:x86

6c9d1cd696f10e16399434f43b4a66d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

PeekMessageA
CharUpperBuffW

gdi32

LineTo

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayCreate

comctl32

ImageList_Add

wininet

InternetCloseHandle

comdlg32

ChooseColorA

Sections

T-VMP
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: - Virtual size: 6.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T-VMP
Size: - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

T-VMP
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

T-VMP
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 548KB - Virtual size: 545KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T-VMP
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c9d1cd696f10e16399434f43b4a66d7

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

T-VMP Size: - Virtual size: 1.2MB

T-VMP Size: - Virtual size: 6.9MB

T-VMP Size: - Virtual size: 438KB

T-VMP Size: - Virtual size: 3.5MB

T-VMP Size: 4KB - Virtual size: 2KB

T-VMP Size: 8.4MB - Virtual size: 8.4MB

T-VMP Size: 72KB - Virtual size: 69KB

T-VMP Size: 1.7MB - Virtual size: 1.7MB

T-VMP Size: 4KB - Virtual size: 4KB

T-VMP Size: 548KB - Virtual size: 545KB

T-VMP Size: 72KB - Virtual size: 69KB

T-VMP
Size: - Virtual size: 1.2MB

T-VMP
Size: - Virtual size: 6.9MB

T-VMP
Size: - Virtual size: 438KB

T-VMP
Size: - Virtual size: 3.5MB

T-VMP
Size: 4KB - Virtual size: 2KB

T-VMP
Size: 8.4MB - Virtual size: 8.4MB

T-VMP
Size: 72KB - Virtual size: 69KB

T-VMP
Size: 1.7MB - Virtual size: 1.7MB

T-VMP
Size: 4KB - Virtual size: 4KB

T-VMP
Size: 548KB - Virtual size: 545KB

T-VMP
Size: 72KB - Virtual size: 69KB