4e15413ea3ec6fda20d2b6f37a28401ea16929772ad59310ddaa4ea5cb220b22

Sharing

Copy URL

Twitter E-mail

General

Target

4e15413ea3ec6fda20d2b6f37a28401ea16929772ad59310ddaa4ea5cb220b22
Size

8.9MB
MD5

44159a48df832e9a12636f37044b29ea
SHA1

a5c43861ad91a35e71cb0ab748384b092fe4f841
SHA256

4e15413ea3ec6fda20d2b6f37a28401ea16929772ad59310ddaa4ea5cb220b22
SHA512

4896d86350f36863967277530a837956482b046a2fd7b5ec456a0886424e2268f0414f20e9d7ecd285f4f6ec3d04c39aaffc10a4e722a31100aad1aff1beee56
SSDEEP

196608:8HygLd6jkPHSwzSnuUxxpiS0My1WeeNSvJgePF4yM/CdVcVhF5:NWUerWZt0Myph20+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e15413ea3ec6fda20d2b6f37a28401ea16929772ad59310ddaa4ea5cb220b22

Files

4e15413ea3ec6fda20d2b6f37a28401ea16929772ad59310ddaa4ea5cb220b22
.exe windows:5 windows x86 arch:x86

c2d3a9a763a13cc550ca661551a310f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

WSAAsyncSelect

kernel32

GetVersionExA
GetVersion
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

PtInRect

gdi32

GetPolyFillMode

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

SafeArrayGetDim

comctl32

ImageList_Destroy

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 11.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newimp
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wsdun2
Size: - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wsdun2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp1
Size: - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c2d3a9a763a13cc550ca661551a310f9

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: - Virtual size: 1.3MB

.rdata Size: - Virtual size: 11.3MB

.data Size: - Virtual size: 432KB

.rsrc Size: - Virtual size: 24KB

.newimp Size: - Virtual size: 4KB

.wsdun2 Size: - Virtual size: 736KB

.idata Size: - Virtual size: 12KB

.vmp0 Size: - Virtual size: 4KB

.wsdun2 Size: - Virtual size: 4KB

.vmp1 Size: - Virtual size: 572KB

.vmp2 Size: 8.9MB - Virtual size: 8.9MB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: - Virtual size: 1.3MB

.rdata
Size: - Virtual size: 11.3MB

.data
Size: - Virtual size: 432KB

.rsrc
Size: - Virtual size: 24KB

.newimp
Size: - Virtual size: 4KB

.wsdun2
Size: - Virtual size: 736KB

.idata
Size: - Virtual size: 12KB

.vmp0
Size: - Virtual size: 4KB

.wsdun2
Size: - Virtual size: 4KB

.vmp1
Size: - Virtual size: 572KB

.vmp2
Size: 8.9MB - Virtual size: 8.9MB

.rsrc
Size: 4KB - Virtual size: 3KB