e880c3ae63938fe8e96c5c14257f48dc773da224c1b44fbfd90a3ee5050dff57

Sharing

Copy URL Twitter E-mail

General

Target

e880c3ae63938fe8e96c5c14257f48dc773da224c1b44fbfd90a3ee5050dff57
Size

6.9MB
MD5

85e9dd0dbead074694e908d01f1d180c
SHA1

458c406f6f440f342561948e36debfa1e34b232d
SHA256

e880c3ae63938fe8e96c5c14257f48dc773da224c1b44fbfd90a3ee5050dff57
SHA512

16e64758fd2c226002a3fc4913ca2b2069692e01f94fd8553cc6741b79962a34468baea497a643aad5573b4d14103af83b8455000d378564f1662dda8c9fea8e
SSDEEP

98304:JW8QTkwlzSLM1fTKm6DBtHN05WgvEyBkHC2ueYZLEQvhEZ0AelMEZfJYzLmZRZoc:JW51s05Wg9YuPoOhEaAw/QmNJnegL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e880c3ae63938fe8e96c5c14257f48dc773da224c1b44fbfd90a3ee5050dff57

Files

e880c3ae63938fe8e96c5c14257f48dc773da224c1b44fbfd90a3ee5050dff57
.exe windows:4 windows x86 arch:x86

e4609750de70b50f0239756a9b0074f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

winmm

waveOutClose

ws2_32

closesocket

kernel32

IsBadReadPtr

user32

GetDlgItem

gdi32

LineTo

msimg32

GradientFill

winspool.drv

ClosePrinter

advapi32

RegQueryValueExA

shell32

DragQueryFileA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_GetIcon

oledlg

ord8

wldap32

ord29

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: 5.8MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4609750de70b50f0239756a9b0074f6

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wldap32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Exports

Exports

Sections

.text Size: 5.8MB - Virtual size: 7.4MB

.sedata Size: 1.0MB - Virtual size: 1.0MB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 5.8MB - Virtual size: 7.4MB

.sedata
Size: 1.0MB - Virtual size: 1.0MB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.sedata
Size: 4KB - Virtual size: 4KB