94a1cc533001cbca25104768e76c14ffb9946926895a3e49d6dc7de1f0ecd2ad

Sharing

Copy URL

Twitter E-mail

General

Target

94a1cc533001cbca25104768e76c14ffb9946926895a3e49d6dc7de1f0ecd2ad
Size

14.9MB
MD5

75c5eab1eee7cce3d125165095a4869a
SHA1

cc8763dd506c9b268cad038ce65b31b1f0ca4fc8
SHA256

94a1cc533001cbca25104768e76c14ffb9946926895a3e49d6dc7de1f0ecd2ad
SHA512

38c57ad884c829c66d9b831671bdadc22006a7f67b988457cde34da00a91c484f668644ad1baa3ff0f54163aa3eb067883fcea726a19b4a830f11e37217f26f8
SSDEEP

393216:brgwWSOvB/aVGfXO3UwyNq7sR9v11uvu/5Ki:fgDzQV+e+q09NMvS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a1cc533001cbca25104768e76c14ffb9946926895a3e49d6dc7de1f0ecd2ad

Files

94a1cc533001cbca25104768e76c14ffb9946926895a3e49d6dc7de1f0ecd2ad
.exe windows:5 windows x86 arch:x86

cf6af9aa99b150e7307ce59a0be29793

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegDeleteValueA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 630KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 14.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(mj
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s>T
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lvj
Size: 14.9MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf6af9aa99b150e7307ce59a0be29793

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 630KB

.rdata Size: - Virtual size: 14.8MB

.data Size: - Virtual size: 295KB

.(mj Size: - Virtual size: 5.9MB

.s>T Size: 4KB - Virtual size: 2KB

.lvj Size: 14.9MB - Virtual size: 14.9MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 630KB

.rdata
Size: - Virtual size: 14.8MB

.data
Size: - Virtual size: 295KB

.(mj
Size: - Virtual size: 5.9MB

.s>T
Size: 4KB - Virtual size: 2KB

.lvj
Size: 14.9MB - Virtual size: 14.9MB

.rsrc
Size: 8KB - Virtual size: 6KB