a0280bf46518c7933820172a4e9eb216adb8ba391c9e912665eef4a230d42748

Sharing

Copy URL Twitter E-mail

General

Target

a0280bf46518c7933820172a4e9eb216adb8ba391c9e912665eef4a230d42748
Size

10.6MB
MD5

f6d3e06d845362880953d0f3ca4c5cbe
SHA1

97f40d8f04f07f5ac055553f7e708f36a1b21d22
SHA256

a0280bf46518c7933820172a4e9eb216adb8ba391c9e912665eef4a230d42748
SHA512

cf12138bb4ffcbec46a709348f275b1bdd32418b2406de9daf4c5941845048bf841f4ac175bd339502d2971c6b496189669632c43c77fecb65c4c28b337f95b9
SSDEEP

196608:ZhTnYr/AMx7N9XAt+wjdrQPMKMhPNjcFRRNLavcPSSvzCIFA3r65PV:f9zMqmMKfRRxEQJay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0280bf46518c7933820172a4e9eb216adb8ba391c9e912665eef4a230d42748

Files

a0280bf46518c7933820172a4e9eb216adb8ba391c9e912665eef4a230d42748
.exe windows:5 windows x86 arch:x86

93e5b5ba0d5c4d950aae14cf9cb6d22e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SystemParametersInfoA
SetParent

gdi32

SetBkColor
SetMapMode

imm32

ImmSetCandidateWindow

winspool.drv

ClosePrinter
DocumentPropertiesA

advapi32

RegSetValueExA
RegQueryValueExA

comctl32

ord17
ImageList_GetIcon

shlwapi

PathFileExistsA

rasapi32

RasGetConnectStatusA

winmm

waveOutRestart

ws2_32

select

msimg32

GradientFill

shell32

Shell_NotifyIconA

ole32

OleRun

oleaut32

UnRegisterTypeLi

wininet

InternetOpenA

wldap32

ord29

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v;7
Size: - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uRT
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a!j
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93e5b5ba0d5c4d950aae14cf9cb6d22e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

imm32

winspool.drv

advapi32

comctl32

shlwapi

rasapi32

winmm

ws2_32

msimg32

shell32

ole32

oleaut32

wininet

wldap32

comdlg32

Sections

.text Size: - Virtual size: 3.0MB

.rdata Size: - Virtual size: 3.8MB

.data Size: - Virtual size: 1.4MB

.v;7 Size: - Virtual size: 4.8MB

.uRT Size: 4KB - Virtual size: 3KB

.a!j Size: 10.6MB - Virtual size: 10.6MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 3.0MB

.rdata
Size: - Virtual size: 3.8MB

.data
Size: - Virtual size: 1.4MB

.v;7
Size: - Virtual size: 4.8MB

.uRT
Size: 4KB - Virtual size: 3KB

.a!j
Size: 10.6MB - Virtual size: 10.6MB

.rsrc
Size: 8KB - Virtual size: 6KB