a7332b338936d8aaa1055fef1b1c676ee666e0331e1d1878f317b095e9d00e93

Sharing

Copy URL Twitter E-mail

General

Target

a7332b338936d8aaa1055fef1b1c676ee666e0331e1d1878f317b095e9d00e93
Size

13.6MB
MD5

bf6626374f6173e09c967f2f4005476a
SHA1

51a88104070c182e3645ceb125f9559a217f3085
SHA256

a7332b338936d8aaa1055fef1b1c676ee666e0331e1d1878f317b095e9d00e93
SHA512

aa198b024f411ae73fdc7df2f3009c50744b92e081764ef6bdf2591d8e6fcc4d90f7cd76e0dd7ee0f15e29eadec391689e6c59e7af299cac688866a79d95aaa1
SSDEEP

393216:lh0wyO0SHi7QzPRFHQOTgkNS9mvuf3YXd///fffO:lh0wyOfiS/QOgMWmo3YXd///fffO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a7332b338936d8aaa1055fef1b1c676ee666e0331e1d1878f317b095e9d00e93

Files

a7332b338936d8aaa1055fef1b1c676ee666e0331e1d1878f317b095e9d00e93
.exe windows:5 windows x86 arch:x86

d6321688ca3bdd6e3e461fb46f972292

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

GetVersion
GetVersionExA

user32

GetMenu

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

wininet

InternetCloseHandle

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qvmp0
Size: - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qvmp1
Size: 4KB - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qvmp2
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6321688ca3bdd6e3e461fb46f972292

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 584KB

.rdata Size: - Virtual size: 281KB

.data Size: - Virtual size: 256KB

.qvmp0 Size: - Virtual size: 7.9MB

.qvmp1 Size: 4KB - Virtual size: 132B

.qvmp2 Size: 13.6MB - Virtual size: 13.6MB

.rsrc Size: 72KB - Virtual size: 71KB

.text
Size: - Virtual size: 584KB

.rdata
Size: - Virtual size: 281KB

.data
Size: - Virtual size: 256KB

.qvmp0
Size: - Virtual size: 7.9MB

.qvmp1
Size: 4KB - Virtual size: 132B

.qvmp2
Size: 13.6MB - Virtual size: 13.6MB

.rsrc
Size: 72KB - Virtual size: 71KB