5a474acf62456221f189e96ec8f0375d255c691ecc891e173b069f081c6d7fb5

Sharing

Copy URL

Twitter E-mail

General

Target

5a474acf62456221f189e96ec8f0375d255c691ecc891e173b069f081c6d7fb5
Size

12.3MB
MD5

675d3b53e0c7dde77a035cb96aac01a5
SHA1

fabe46e0a96be80ed020e5d3703e3a79605170c1
SHA256

5a474acf62456221f189e96ec8f0375d255c691ecc891e173b069f081c6d7fb5
SHA512

b3214e420d81a18a3106fd163b78192af69c9bccdfe2863f80092b35b581d4e4e27cabcef2759fd387bb79d36b0e295150f810413f4aadea3d18e68d89e10936
SSDEEP

196608:CPfwxBKHbXau1GBRGo+IUqtI/mEpKX22XNEPPEKS:CXwx8bBpqtMmEAdN7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a474acf62456221f189e96ec8f0375d255c691ecc891e173b069f081c6d7fb5

Files

5a474acf62456221f189e96ec8f0375d255c691ecc891e173b069f081c6d7fb5
.exe windows:5 windows x86 arch:x86

6c1fc0a095ad90fa096571e4d8dc3f7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

winmm

midiStreamOut

ws2_32

accept

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

LoadStringA

gdi32

PatBlt

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

DragAcceptFiles

ole32

CLSIDFromProgID

oleaut32

SafeArrayAccessData

comctl32

ImageList_DragShowNolock

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iMp
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ZEQ
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.}n^
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c1fc0a095ad90fa096571e4d8dc3f7a

Headers

File Characteristics

Imports

msvfw32

avifil32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 316KB - Virtual size: 315KB

.data Size: 104KB - Virtual size: 352KB

.iMp Size: 6.5MB - Virtual size: 6.5MB

.ZEQ Size: 4KB - Virtual size: 2KB

.}n^ Size: 4.2MB - Virtual size: 4.2MB

.rsrc Size: 40KB - Virtual size: 39KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 316KB - Virtual size: 315KB

.data
Size: 104KB - Virtual size: 352KB

.iMp
Size: 6.5MB - Virtual size: 6.5MB

.ZEQ
Size: 4KB - Virtual size: 2KB

.}n^
Size: 4.2MB - Virtual size: 4.2MB

.rsrc
Size: 40KB - Virtual size: 39KB