442660a7150f7eb4e79318310e60bc76660641bf2db6154d653c002101122b23

Sharing

Copy URL Twitter E-mail

General

Target

442660a7150f7eb4e79318310e60bc76660641bf2db6154d653c002101122b23
Size

12.4MB
MD5

d44ba2d83d51c746016603683dccedff
SHA1

513efa214d37a9f88e59f3b33fe2ecabd2385522
SHA256

442660a7150f7eb4e79318310e60bc76660641bf2db6154d653c002101122b23
SHA512

da1bd8c1171a4669f01be0a9207dfab5964e8755e72427df76f110cafa4b9194bcd8a71d8800bc2a7d9a46431d9b66c1c30fac9f5acfb65b6881b6c51149bfeb
SSDEEP

393216:0Ui47Zqpiw3DDcJlqTQK4DCq1Fgz1I1sEgZeBUIyCug91:E47ZgTTwJ+Q4c+ZI8ZeBNugz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442660a7150f7eb4e79318310e60bc76660641bf2db6154d653c002101122b23

Files

442660a7150f7eb4e79318310e60bc76660641bf2db6154d653c002101122b23
.exe windows:4 windows x86 arch:x86

fe207efd11a5553e51f43adf71c4fa5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

bind

kernel32

CreateFileMappingA

user32

PeekMessageA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetLBound

comctl32

ord17

comdlg32

ChooseFontA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 11.2MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe207efd11a5553e51f43adf71c4fa5f

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 11.2MB - Virtual size: 15.6MB

.sedata Size: 1.1MB - Virtual size: 1.1MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 11.2MB - Virtual size: 15.6MB

.sedata
Size: 1.1MB - Virtual size: 1.1MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB