f8a37f5b39c124f3f4b199186c62be04ea47676dfab1e606d678a0c60b14374b

Sharing

Copy URL Twitter E-mail

General

Target

f8a37f5b39c124f3f4b199186c62be04ea47676dfab1e606d678a0c60b14374b
Size

1.3MB
MD5

4e3fa775aa3719fd5aed4feefd05170f
SHA1

9002f9b4086b84e594fb5757a198f48fcca78660
SHA256

f8a37f5b39c124f3f4b199186c62be04ea47676dfab1e606d678a0c60b14374b
SHA512

6faacc0c63116687809884162cb0b367aaa049d40882730b20320e9661dc989c15a5b6e378c5a1efc6868a878cda2a0046f995769dc51605b6920af90349020b
SSDEEP

24576:Fh5a29aLbeqX3VIxzO8IH8yqfDhGHkdTRPfSjuWmcxadIB21CM7kMGoWvXhPxM:FnjIeqazJcxqfFyjRKxg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8a37f5b39c124f3f4b199186c62be04ea47676dfab1e606d678a0c60b14374b

Files

f8a37f5b39c124f3f4b199186c62be04ea47676dfab1e606d678a0c60b14374b
.dll windows:4 windows x86 arch:x86

5c4697d498dde6194e856bdbb17bc9b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

iphlpapi

GetAdaptersInfo

winmm

waveOutGetNumDevs

ws2_32

connect

kernel32

GlobalUnlock

user32

ScrollWindowEx

gdi32

SetROP2

winspool.drv

ClosePrinter

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 894KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 554KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c4697d498dde6194e856bdbb17bc9b2

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 894KB

.rdata Size: - Virtual size: 138KB

.data Size: - Virtual size: 529KB

.text Size: - Virtual size: 554KB

.data Size: - Virtual size: 32KB

.text Size: 1.3MB - Virtual size: 1.3MB

.data Size: 4KB - Virtual size: 964B

.reloc Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: - Virtual size: 894KB

.rdata
Size: - Virtual size: 138KB

.data
Size: - Virtual size: 529KB

.text
Size: - Virtual size: 554KB

.data
Size: - Virtual size: 32KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 4KB - Virtual size: 964B

.reloc
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 22KB