54cd2f2ac214bc1472b3c63d631bd340889fd877ff217a93b037d01327bd9bea

Sharing

Copy URL Twitter E-mail

General

Target

54cd2f2ac214bc1472b3c63d631bd340889fd877ff217a93b037d01327bd9bea
Size

10.6MB
MD5

cfb3490a6c056728807ed1dab4c89d8c
SHA1

d3c4e51c475ae1f290fe7f69c9e550c9e748f628
SHA256

54cd2f2ac214bc1472b3c63d631bd340889fd877ff217a93b037d01327bd9bea
SHA512

3f673cb10ca70b2cf24596e930afdf37779c0377596b5c93a1ece03704e5d52cf0b9c150d91881712e24f17129c97befe09cc875ecaae009156727078a5bca1e
SSDEEP

196608:I5xPf3np6HUl5Jg1FQqg9GYB3KmSJTEOsEqnRFbQFvxV4gfPRIohOOA9:uxPPguqpuNMaVYPVGwe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54cd2f2ac214bc1472b3c63d631bd340889fd877ff217a93b037d01327bd9bea

Files

54cd2f2ac214bc1472b3c63d631bd340889fd877ff217a93b037d01327bd9bea
.exe windows:5 windows x86 arch:x86

2394f777c94d6676663b23c567ad05c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasGetConnectStatusA

winmm

waveOutUnprepareHeader

ws2_32

ntohl

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

wsprintfA

gdi32

SelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

VariantChangeType

odbc32

ord17

comctl32

ImageList_GetIcon

wldap32

ord29

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 954KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.X[q
Size: - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Af:
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.O>Y
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2394f777c94d6676663b23c567ad05c7

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

wldap32

wininet

comdlg32

Sections

.text Size: - Virtual size: 954KB

.rdata Size: - Virtual size: 246KB

.data Size: - Virtual size: 404KB

.X[q Size: - Virtual size: 5.9MB

.Af: Size: 4KB - Virtual size: 2KB

.O>Y Size: 10.6MB - Virtual size: 10.6MB

.rsrc Size: 32KB - Virtual size: 28KB

.text
Size: - Virtual size: 954KB

.rdata
Size: - Virtual size: 246KB

.data
Size: - Virtual size: 404KB

.X[q
Size: - Virtual size: 5.9MB

.Af:
Size: 4KB - Virtual size: 2KB

.O>Y
Size: 10.6MB - Virtual size: 10.6MB

.rsrc
Size: 32KB - Virtual size: 28KB