c291e575ce7d5ff755c324a1593db2bbdfab318e3ea6b48dc12610bc2a842d38

Sharing

Copy URL

Twitter E-mail

General

Target

c291e575ce7d5ff755c324a1593db2bbdfab318e3ea6b48dc12610bc2a842d38
Size

11.4MB
MD5

29338b4e5622fdaac94df0e164dc02ac
SHA1

1683512c59231868f096146fe796797ff9fe3ca8
SHA256

c291e575ce7d5ff755c324a1593db2bbdfab318e3ea6b48dc12610bc2a842d38
SHA512

957a1cf888076bd7c60d42f5e8a2ac1543c670ca9b2f3dde844ffce5930e7dcbd87a70df19635727cef97152f9ba1f77534e0d820e5b1d7437d2063e4af7cf89
SSDEEP

196608:cQHTjQ9QfriHY+o9gSiku5nr/lITDBPnFVN3ZSRsMCu6ttrwcDl7ChFj5/BJse00:cQHJziWGnaTdPP+k7/eXF/BJse6mT9n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c291e575ce7d5ff755c324a1593db2bbdfab318e3ea6b48dc12610bc2a842d38

Files

c291e575ce7d5ff755c324a1593db2bbdfab318e3ea6b48dc12610bc2a842d38
.exe windows:6 windows x86 arch:x86

aa601ced7ddb0e35aba49c36514210da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame

iphlpapi

GetAdaptersInfo

winmm

midiOutPrepareHeader

ws2_32

accept

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

LoadStringA

gdi32

DeleteDC

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

DragAcceptFiles

ole32

OleInitialize

oleaut32

SysAllocString

comctl32

ImageList_DragMove

Exports

Exports

e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText

Sections

.text
Size: - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..x@
Size: - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.O>1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f+G
Size: 11.4MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa601ced7ddb0e35aba49c36514210da

Headers

DLL Characteristics

File Characteristics

Imports

msvfw32

avifil32

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

Exports

Exports

Sections

.text Size: - Virtual size: 810KB

.rdata Size: - Virtual size: 136KB

.data Size: - Virtual size: 615KB

..x@ Size: - Virtual size: 9.9MB

.O>1 Size: 3KB - Virtual size: 2KB

.f+G Size: 11.4MB - Virtual size: 11.4MB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: - Virtual size: 810KB

.rdata
Size: - Virtual size: 136KB

.data
Size: - Virtual size: 615KB

..x@
Size: - Virtual size: 9.9MB

.O>1
Size: 3KB - Virtual size: 2KB

.f+G
Size: 11.4MB - Virtual size: 11.4MB

.rsrc
Size: 6KB - Virtual size: 6KB