6561114ceddd12ad9d2fe3838b6d678273d51e2ae9287dc8fb577273b80ffba7

Sharing

Copy URL Twitter E-mail

General

Target

6561114ceddd12ad9d2fe3838b6d678273d51e2ae9287dc8fb577273b80ffba7
Size

1.4MB
MD5

ec34d4256de72524f4dfa02dd8823a03
SHA1

8cf8941a9fba1f743da3c863886b587a1f5aec0e
SHA256

6561114ceddd12ad9d2fe3838b6d678273d51e2ae9287dc8fb577273b80ffba7
SHA512

b49a0b456f0723600f9ea6204765b361674e9637a863cbedd12222d5e400909275eaf7d0cf0c24ab139ce77ec3c183cdce0ba1f4dbebd314e78656549f069779
SSDEEP

24576:zczRCDwiYE8tPfXTZMwGhz4kHQSeR2BQJqWKhGwsJ6dIlstBrFdLY0dzAfZul:zQRC8iT8t3XTZk55tAqDmMr37Iul

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6561114ceddd12ad9d2fe3838b6d678273d51e2ae9287dc8fb577273b80ffba7

Files

6561114ceddd12ad9d2fe3838b6d678273d51e2ae9287dc8fb577273b80ffba7
.exe windows:5 windows x86 arch:x86

a1d373231116c243f10bd7e743eec345

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

InitializeSecurityDescriptor

comctl32

ImageList_GetImageCount

gdi32

GetStretchBltMode

kernel32

ReadFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

msimg32

GradientFill

oleaut32

SysAllocStringLen

rasapi32

RasHangUpA

shell32

Shell_NotifyIcon

user32

PtInRect

wininet

InternetConnectA

winmm

waveOutOpen

winspool.drv

DocumentPropertiesA

ws2_32

WSAAsyncSelect

comdlg32

GetFileTitleA

ole32

CoTaskMemFree

oledlg

OleUIBusyA

Sections

.text
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aspack
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.snaker
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a1d373231116c243f10bd7e743eec345

Headers

File Characteristics

Imports

advapi32

comctl32

gdi32

kernel32

msimg32

oleaut32

rasapi32

shell32

user32

wininet

winmm

winspool.drv

ws2_32

comdlg32

ole32

oledlg

Sections

.text Size: - Virtual size: 576KB

.rdata Size: - Virtual size: 240KB

.data Size: - Virtual size: 352KB

.vmp0 Size: - Virtual size: 44KB

.aspack Size: - Virtual size: 24KB

.adata Size: - Virtual size: 4KB

.snaker Size: - Virtual size: 12KB

.snaker Size: - Virtual size: 12KB

.snaker Size: - Virtual size: 12KB

.aspack Size: - Virtual size: 8KB

.adata Size: - Virtual size: 4KB

.snaker Size: - Virtual size: 12KB

.vmp1 Size: - Virtual size: 838KB

.vmp2 Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: - Virtual size: 576KB

.rdata
Size: - Virtual size: 240KB

.data
Size: - Virtual size: 352KB

.vmp0
Size: - Virtual size: 44KB

.aspack
Size: - Virtual size: 24KB

.adata
Size: - Virtual size: 4KB

.snaker
Size: - Virtual size: 12KB

.snaker
Size: - Virtual size: 12KB

.snaker
Size: - Virtual size: 12KB

.aspack
Size: - Virtual size: 8KB

.adata
Size: - Virtual size: 4KB

.snaker
Size: - Virtual size: 12KB

.vmp1
Size: - Virtual size: 838KB

.vmp2
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 20KB - Virtual size: 19KB