b63c5b60f31fc12d28ed8354db3f30ff9b060bb6ab93b04e6d8f401b253eed9d

Sharing

Copy URL

Twitter E-mail

General

Target

b63c5b60f31fc12d28ed8354db3f30ff9b060bb6ab93b04e6d8f401b253eed9d
Size

11.8MB
MD5

788566763dfdda9ed7b3abd633871c35
SHA1

e753df08030cdb2d5cc903ee89469867999b6c49
SHA256

b63c5b60f31fc12d28ed8354db3f30ff9b060bb6ab93b04e6d8f401b253eed9d
SHA512

29ddc491728236ad1670f5700dac1c548debf8e9455188fdbc04c5fa5dc22d4e2357711173d1803d7099bfe4358b5631de1faacd712c3f1afbadba312f255f04
SSDEEP

196608:b1LuH3e1CtobYWdUQtW3iZ2jINekrGlgtwX1naZiTWHVMNgBFqt:qBWdrtXekSswlHW1+gXqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b63c5b60f31fc12d28ed8354db3f30ff9b060bb6ab93b04e6d8f401b253eed9d

Files

b63c5b60f31fc12d28ed8354db3f30ff9b060bb6ab93b04e6d8f401b253eed9d
.exe windows:4 windows x86 arch:x86

dcbd012b165f7ebcbb8d3c1db6cb7cbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantTimeToSystemTime

shell32

ShellExecuteA

winspool.drv

DeviceCapabilitiesA

gdi32

GetDeviceCaps

user32

UpdateWindow

kernel32

CreateDirectoryA

msvcrt

pow

mfc42

ord1576

vmprotectsdk32

VMProtectEnd

chwsynlibfunc

?SetLayer@@YAXAAVCChwDraw@@@Z

chwcalc

?Linedot_CFC@@YAHNNNNNNNNPAN0@Z

chwdraw

?classCPitRsdDrawView@CPitRsdDrawView@@2UCRuntimeClass@@B

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 922KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 317KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcbd012b165f7ebcbb8d3c1db6cb7cbc

Headers

File Characteristics

Imports

oleaut32

shell32

winspool.drv

gdi32

user32

kernel32

msvcrt

mfc42

vmprotectsdk32

chwsynlibfunc

chwcalc

chwdraw

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 184KB - Virtual size: 181KB

.data Size: 248KB - Virtual size: 922KB

.vdata Size: 320KB - Virtual size: 320KB

.text Size: 8.3MB - Virtual size: 8.3MB

.data Size: 52KB - Virtual size: 51KB

.rsrc Size: 320KB - Virtual size: 317KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 184KB - Virtual size: 181KB

.data
Size: 248KB - Virtual size: 922KB

.vdata
Size: 320KB - Virtual size: 320KB

.text
Size: 8.3MB - Virtual size: 8.3MB

.data
Size: 52KB - Virtual size: 51KB

.rsrc
Size: 320KB - Virtual size: 317KB