bfaa187e77978ba6d8c9d01899bf56bb457d727d367e1bbc6b1ca8462ba28bc6

Sharing

Copy URL

Twitter E-mail

General

Target

bfaa187e77978ba6d8c9d01899bf56bb457d727d367e1bbc6b1ca8462ba28bc6
Size

14.3MB
MD5

1f2e054b3d60e7472d9a0ec4f0afa8f3
SHA1

c3c516055a4058184f75e354f533163c69686c4a
SHA256

bfaa187e77978ba6d8c9d01899bf56bb457d727d367e1bbc6b1ca8462ba28bc6
SHA512

057b47b8de62783aa27ea589eadd7058963efd31180634e8ea256e5d5cbe4892bb418d1fdddb2d2f1a43fe8113340bddd00bf5d20ac60478e9f86a4b722992a8
SSDEEP

393216:AMdOc3QE489foMi1aBQCPzjtvkAaK5dN15SNVDos3nr3mB/uQ+:9sc49Mi8QCPz5vkTK5JkVk83yT+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bfaa187e77978ba6d8c9d01899bf56bb457d727d367e1bbc6b1ca8462ba28bc6

Files

bfaa187e77978ba6d8c9d01899bf56bb457d727d367e1bbc6b1ca8462ba28bc6
.exe windows:5 windows x86 arch:x86

c2defd1c683c6c520fe3ab0d501e08fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegCreateKeyExA

user32

SetTimer

kernel32

GetVersion
GetVersionExA
VirtualFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

DeleteEnhMetaFile

version

VerQueryValueA

mpr

WNetGetConnectionA

ole32

StringFromCLSID

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateSecurityManager

wininet

InternetReadFile

shell32

SHGetSpecialFolderLocation

comdlg32

GetOpenFileNameA

wsock32

WSAGetLastError

gdiplus

GdipDeleteGraphics

Sections

C 5A8A#e
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5IB`i$l*
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

h->fpt+J
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

h1:_iR36
Size: - Virtual size: 30.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

>8>CJU_6
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

-)cNZ)g8
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fFC+45dZ
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bd*bl_xy
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

pj.Fy4V\
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2defd1c683c6c520fe3ab0d501e08fc

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

mpr

ole32

comctl32

urlmon

wininet

shell32

comdlg32

wsock32

gdiplus

Sections

C 5A8A#e Size: - Virtual size: 1.4MB

5IB`i$l* Size: - Virtual size: 6KB

h->fpt+J Size: - Virtual size: 84KB

h1:_iR36 Size: - Virtual size: 30.0MB

>8>CJU_6 Size: - Virtual size: 15KB

-)cNZ)g8 Size: - Virtual size: 60B

fFC+45dZ Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 10.3MB

.vmp1 Size: 10.5MB - Virtual size: 10.5MB

Bd*bl_xy Size: 512B - Virtual size: 236B

pj.Fy4V\ Size: 8KB - Virtual size: 7KB

C 5A8A#e
Size: - Virtual size: 1.4MB

5IB`i$l*
Size: - Virtual size: 6KB

h->fpt+J
Size: - Virtual size: 84KB

h1:_iR36
Size: - Virtual size: 30.0MB

>8>CJU_6
Size: - Virtual size: 15KB

-)cNZ)g8
Size: - Virtual size: 60B

fFC+45dZ
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 10.3MB

.vmp1
Size: 10.5MB - Virtual size: 10.5MB

Bd*bl_xy
Size: 512B - Virtual size: 236B

pj.Fy4V\
Size: 8KB - Virtual size: 7KB