17073572ae27cfb68d239f97b09abcee8dbbca677b2e608262b05c8053825744

Sharing

Copy URL Twitter E-mail

General

Target

17073572ae27cfb68d239f97b09abcee8dbbca677b2e608262b05c8053825744
Size

4.6MB
MD5

5d5f8e398af15ee8222290f205b16170
SHA1

6590e1fa3a073bf9ae00299692a1881c1332e888
SHA256

17073572ae27cfb68d239f97b09abcee8dbbca677b2e608262b05c8053825744
SHA512

e6d9b504270b457808141c8c9be5908ffd8033b3b54b20cb76d847f29b29f454c84d261e9912a5a0627c077832d843654ba83724e870c2023619de63442a90ae
SSDEEP

98304:DOOpWOgtr9L9ZX/MkxQhxej0sWvIELgxy2tGQvRLyT1iw6+BsoMk/jBoDIkazt:aOwOMrVfPWxs0xvXLuyQvRCm+B4woDX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17073572ae27cfb68d239f97b09abcee8dbbca677b2e608262b05c8053825744

Files

17073572ae27cfb68d239f97b09abcee8dbbca677b2e608262b05c8053825744
.exe windows:5 windows x86 arch:x86

daaed4946a3f4c8f83f0c4848e7f4881

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SafeArrayGetLBound

advapi32

RegCloseKey

user32

GetKeyboardState

kernel32

GetExitCodeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

SetPaletteEntries

version

GetFileVersionInfoSizeA

ole32

CoInitialize

comctl32

ImageList_GetIconSize

urlmon

URLDownloadToFileA

shell32

SHGetMalloc

wsock32

getsockopt

winmm

timeGetTime

netapi32

Netbios

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 80B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.x860
Size: - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.x861
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

daaed4946a3f4c8f83f0c4848e7f4881

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

ole32

comctl32

urlmon

shell32

wsock32

winmm

netapi32

Sections

.text Size: - Virtual size: 1.4MB

.itext Size: - Virtual size: 9KB

.data Size: - Virtual size: 81KB

.bss Size: - Virtual size: 48KB

.idata Size: - Virtual size: 15KB

.tls Size: - Virtual size: 80B

.rdata Size: - Virtual size: 24B

.x860 Size: - Virtual size: 4.9MB

.x861 Size: 4.1MB - Virtual size: 4.1MB

.reloc Size: 512B - Virtual size: 100B

.rsrc Size: 18KB - Virtual size: 17KB

.text
Size: - Virtual size: 1.4MB

.itext
Size: - Virtual size: 9KB

.data
Size: - Virtual size: 81KB

.bss
Size: - Virtual size: 48KB

.idata
Size: - Virtual size: 15KB

.tls
Size: - Virtual size: 80B

.rdata
Size: - Virtual size: 24B

.x860
Size: - Virtual size: 4.9MB

.x861
Size: 4.1MB - Virtual size: 4.1MB

.reloc
Size: 512B - Virtual size: 100B

.rsrc
Size: 18KB - Virtual size: 17KB