6241e2879538c601825504979e5971e07192c05c26250705bfad2bd014478349

Sharing

Copy URL Twitter E-mail

General

Target

6241e2879538c601825504979e5971e07192c05c26250705bfad2bd014478349
Size

10.5MB
MD5

1771eb8f1f00bd1dbf88e58a9ca76c76
SHA1

755ed5d831341cf8021ff5f34dccd10ed8aaff53
SHA256

6241e2879538c601825504979e5971e07192c05c26250705bfad2bd014478349
SHA512

936b344c51b69b99333c3eb4dfaae36adab544e5d4483d6465ddd49402f1d109ec04e4659510f6e6993f712c723e0b93bca774977ae22018f4f784997443f143
SSDEEP

196608:N3ib2NXqSfV2gb87IxnR3GCTtEa0GchNwAz1USyHBtmE3NZIQsipoPGOwPYGKfok:wbsXz92gw7U55EFd2ABmtt9ZBpZOwPZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6241e2879538c601825504979e5971e07192c05c26250705bfad2bd014478349

Files

6241e2879538c601825504979e5971e07192c05c26250705bfad2bd014478349
.exe windows:6 windows x86 arch:x86

414d35431e74a17e4f2809bb73ffea02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
HeapReAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetTopWindow

gdi32

GetWindowExtEx

winmm

waveOutWrite

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

CoCreateInstance

oleaut32

SafeArrayDestroy

comctl32

ImageList_Destroy

ws2_32

connect

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp2
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

414d35431e74a17e4f2809bb73ffea02

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 19.7MB

.data Size: - Virtual size: 329KB

.vmp0 Size: - Virtual size: 20KB

.data Size: - Virtual size: 74KB

.text Size: - Virtual size: 512B

.vmp1 Size: - Virtual size: 612KB

.vmp2 Size: 10.5MB - Virtual size: 10.5MB

.reloc Size: 512B - Virtual size: 140B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 19.7MB

.data
Size: - Virtual size: 329KB

.vmp0
Size: - Virtual size: 20KB

.data
Size: - Virtual size: 74KB

.text
Size: - Virtual size: 512B

.vmp1
Size: - Virtual size: 612KB

.vmp2
Size: 10.5MB - Virtual size: 10.5MB

.reloc
Size: 512B - Virtual size: 140B

.rsrc
Size: 4KB - Virtual size: 3KB