3fe4eac240b95e7c52c878103ccce3ce19660444d090be230dee084fdac14e2c

Sharing

Copy URL Twitter E-mail

General

Target

3fe4eac240b95e7c52c878103ccce3ce19660444d090be230dee084fdac14e2c
Size

13.7MB
MD5

1f2c4227cc8108d8147150232acf9ed8
SHA1

e00a3687c4e8030282602af08df4c4a843c1adf8
SHA256

3fe4eac240b95e7c52c878103ccce3ce19660444d090be230dee084fdac14e2c
SHA512

c073793506321a912cde98138a701131f1c62f55cfefbf99fdc33b62a419d8ee94e11d60e23e147e64a7fcbbba86b5dd163f4ce7618078b69deeabe56210abdc
SSDEEP

196608:82D+l1DYDT7m1AnK1qGxdH6k9aJyCr5Ngdc3tpqJB0dYuxB6V7CUUEu:8I+3DYv7m3BH6kcrUwEJB0V6V75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe4eac240b95e7c52c878103ccce3ce19660444d090be230dee084fdac14e2c

Files

3fe4eac240b95e7c52c878103ccce3ce19660444d090be230dee084fdac14e2c
.exe windows:5 windows x86 arch:x86

8107f13e38c5202cd51fb9e34345e26e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SetErrorInfo

advapi32

CloseServiceHandle

user32

GetMenuItemInfoA

kernel32

GetCurrentDirectoryW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

GetWindowOrgEx

version

GetFileVersionInfoA

ole32

CoInitialize

comctl32

ImageList_GetBkColor

urlmon

URLDownloadToFileA

shell32

SHGetDesktopFolder

wsock32

recv

winmm

timeGetTime

netapi32

Netbios

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8107f13e38c5202cd51fb9e34345e26e

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

urlmon

shell32

wsock32

winmm

netapi32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.itext Size: 9KB - Virtual size: 12KB

.data Size: 82KB - Virtual size: 84KB

.bss Size: - Virtual size: 52KB

.idata Size: 16KB - Virtual size: 16KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.vmp0 Size: 6.1MB - Virtual size: 6.1MB

.vmp1 Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 512B - Virtual size: 4KB

.rsrc Size: 240KB - Virtual size: 239KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.itext
Size: 9KB - Virtual size: 12KB

.data
Size: 82KB - Virtual size: 84KB

.bss
Size: - Virtual size: 52KB

.idata
Size: 16KB - Virtual size: 16KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.vmp0
Size: 6.1MB - Virtual size: 6.1MB

.vmp1
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 512B - Virtual size: 4KB

.rsrc
Size: 240KB - Virtual size: 239KB