097781e758de8094654b20a5387dfc3ed6c04a4247e5bcc3c49e221208169461

Sharing

Copy URL Twitter E-mail

General

Target

097781e758de8094654b20a5387dfc3ed6c04a4247e5bcc3c49e221208169461
Size

6.7MB
MD5

5150bbc96f72873bb5aed1bf74f45329
SHA1

660573d295ba88f6b657f9550409b8f9bdc94569
SHA256

097781e758de8094654b20a5387dfc3ed6c04a4247e5bcc3c49e221208169461
SHA512

abbb1b4994c129d30b5b7ff4be49ba4db9bffcdc052727b079abc27a2d8885ce854be8b772d20d0aca5be5e7f935d07e42db83122002f1d463c64a642e3c6973
SSDEEP

196608:l6k9aJyCr5Ngdc3tpqJB0dYuxB6V7CUUEUPekIMPD:l6kcrUwEJB0V6V75AIMPD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097781e758de8094654b20a5387dfc3ed6c04a4247e5bcc3c49e221208169461

Files

097781e758de8094654b20a5387dfc3ed6c04a4247e5bcc3c49e221208169461
.exe windows:5 windows x86 arch:x86

8107f13e38c5202cd51fb9e34345e26e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SetErrorInfo

advapi32

CloseServiceHandle

user32

GetMenuItemInfoA

kernel32

GetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

GetWindowOrgEx

version

GetFileVersionInfoA

ole32

CoInitialize

comctl32

ImageList_GetBkColor

urlmon

URLDownloadToFileA

shell32

SHGetDesktopFolder

wsock32

recv

winmm

timeGetTime

netapi32

Netbios

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 50KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8107f13e38c5202cd51fb9e34345e26e

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

urlmon

shell32

wsock32

winmm

netapi32

Sections

.text Size: - Virtual size: 1.6MB

.itext Size: - Virtual size: 8KB

.data Size: - Virtual size: 81KB

.bss Size: - Virtual size: 50KB

.idata Size: - Virtual size: 15KB

.tls Size: - Virtual size: 80B

.rdata Size: - Virtual size: 24B

.vmp0 Size: - Virtual size: 6.1MB

.vmp1 Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 512B - Virtual size: 176B

.rsrc Size: 240KB - Virtual size: 239KB

.text
Size: - Virtual size: 1.6MB

.itext
Size: - Virtual size: 8KB

.data
Size: - Virtual size: 81KB

.bss
Size: - Virtual size: 50KB

.idata
Size: - Virtual size: 15KB

.tls
Size: - Virtual size: 80B

.rdata
Size: - Virtual size: 24B

.vmp0
Size: - Virtual size: 6.1MB

.vmp1
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 512B - Virtual size: 176B

.rsrc
Size: 240KB - Virtual size: 239KB