7a1ba979979c1fd33903701c3c32fb4d2054121177c572c7d3f26ae58c2f0cce

Sharing

Copy URL

Twitter E-mail

General

Target

7a1ba979979c1fd33903701c3c32fb4d2054121177c572c7d3f26ae58c2f0cce
Size

13.1MB
MD5

941f0ecf2edfd6477f5586ca6a68a7df
SHA1

ab6f650fc59c5c15bfca5e9c6b6dd7b75eb8a8f4
SHA256

7a1ba979979c1fd33903701c3c32fb4d2054121177c572c7d3f26ae58c2f0cce
SHA512

9d02a28f5eb4629d9c18212a69d7d96797ce9b1d9e9d15fdd4d303b7865322cfa1c96986ca7431ce302f197549cb35425da2b8febbb3b34525fccfbc503083a7
SSDEEP

393216:HgQ46K5SI3KB+VOME4oHo86BoQ5BY+jZoAuNY26Y:AQ4vSaKBbtb6ex+jn26Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a1ba979979c1fd33903701c3c32fb4d2054121177c572c7d3f26ae58c2f0cce

Files

7a1ba979979c1fd33903701c3c32fb4d2054121177c572c7d3f26ae58c2f0cce
.dll windows:5 windows x86 arch:x86

e83cea53d0903b1702d8e2a0eac23aea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutRestart

ws2_32

inet_ntoa

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetForegroundWindow

gdi32

LineTo

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

SafeArrayUnaccessData

comctl32

ord17

comdlg32

GetFileTitleA

Exports

Exports

MiKi

Sections

.text
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.]i!
Size: - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

..Py
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.]T^
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e83cea53d0903b1702d8e2a0eac23aea

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Exports

Exports

Sections

.text Size: - Virtual size: 1.0MB

.rdata Size: - Virtual size: 3.5MB

.data Size: - Virtual size: 361KB

.]i! Size: - Virtual size: 7.0MB

..Py Size: 4KB - Virtual size: 2KB

.]T^ Size: 13.1MB - Virtual size: 13.1MB

.reloc Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: - Virtual size: 1.0MB

.rdata
Size: - Virtual size: 3.5MB

.data
Size: - Virtual size: 361KB

.]i!
Size: - Virtual size: 7.0MB

..Py
Size: 4KB - Virtual size: 2KB

.]T^
Size: 13.1MB - Virtual size: 13.1MB

.reloc
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB