d5150ba66c426b4bcd7ce747f072f1e361e21f8fd52cbd8c1fb258308e570b4f

Sharing

Copy URL Twitter E-mail

General

Target

d5150ba66c426b4bcd7ce747f072f1e361e21f8fd52cbd8c1fb258308e570b4f
Size

15.6MB
MD5

1630aca63051cd40832729b0b2a18ce0
SHA1

fdcb4eba83f26a2c922430bad92241686f93022c
SHA256

d5150ba66c426b4bcd7ce747f072f1e361e21f8fd52cbd8c1fb258308e570b4f
SHA512

1b735194ad690bb34a359ce0e664551c264826c25eba3bf9d6d7a1c073f064ce7f38bafe9c2fd04c7c2d9bf68dccd850bda05eec9c649d5b60dd81ccb75fc18a
SSDEEP

393216:73phPJe5R3pMBtS2gVVOt/S397EKVwcw/l0:7VePpMvS2bN6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5150ba66c426b4bcd7ce747f072f1e361e21f8fd52cbd8c1fb258308e570b4f

Files

d5150ba66c426b4bcd7ce747f072f1e361e21f8fd52cbd8c1fb258308e570b4f
.exe windows:5 windows x86 arch:x86

373570993bccd7b9e14a705461fabd88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetDlgItem

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

SHEmptyRecycleBinA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 830KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 967KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ysU
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bQx
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1G5
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

373570993bccd7b9e14a705461fabd88

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 830KB

.rdata Size: - Virtual size: 967KB

.data Size: - Virtual size: 437KB

.ysU Size: - Virtual size: 9.8MB

.bQx Size: 4KB - Virtual size: 2KB

.1G5 Size: 15.6MB - Virtual size: 15.6MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 830KB

.rdata
Size: - Virtual size: 967KB

.data
Size: - Virtual size: 437KB

.ysU
Size: - Virtual size: 9.8MB

.bQx
Size: 4KB - Virtual size: 2KB

.1G5
Size: 15.6MB - Virtual size: 15.6MB

.rsrc
Size: 8KB - Virtual size: 6KB