95df11de18e47fdd290aad16a9049a0e8e01e54a9e053ed145d3e76d438ac9f9

Sharing

Copy URL

Twitter E-mail

General

Target

95df11de18e47fdd290aad16a9049a0e8e01e54a9e053ed145d3e76d438ac9f9
Size

2.4MB
MD5

64b707dff52a3fe4b1a1b52ed5494055
SHA1

dd9e47d9b5fbe73319cde692406014d9520eb520
SHA256

95df11de18e47fdd290aad16a9049a0e8e01e54a9e053ed145d3e76d438ac9f9
SHA512

7ba2b77b54e13f5db1f4a284f9c5aaa90325742a3ff751355f84d3e514e022fac1702554eecc3317e9fe40f703ea130ffd4acdda17a06e31fb0051920b32b8fc
SSDEEP

49152:oLKhNrl+LxMHBTnqHhbNFS9r7g2nSlKXTsJali+CU4Xp5JihRe:RDZ+NeqHhx0Vg2/Ibq4XEhRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95df11de18e47fdd290aad16a9049a0e8e01e54a9e053ed145d3e76d438ac9f9

Files

95df11de18e47fdd290aad16a9049a0e8e01e54a9e053ed145d3e76d438ac9f9
.exe windows:5 windows x86 arch:x86

23fb192e0447f1fa9c6697a5e70b4953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExW
RegUnLoadKeyW

user32

LoadStringW
CreateWindowExW

kernel32

lstrcmpiA
TlsSetValue
lstrcpyW
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

ole32

CreateStreamOnHGlobal
IsEqualGUID

comctl32

InitializeFlatSB

shell32

ShellExecuteW

comdlg32

ChooseFontW

winspool.drv

OpenPrinterW
GetDefaultPrinterW

netapi32

Netbios

winmm

timeGetTime

oleacc

LresultFromObject

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.0MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23fb192e0447f1fa9c6697a5e70b4953

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

msimg32

gdi32

version

ole32

comctl32

shell32

comdlg32

winspool.drv

netapi32

winmm

oleacc

msvcrt

iphlpapi

psapi

Sections

.text Size: 1.0MB - Virtual size: 2.5MB

.sedata Size: 1.4MB - Virtual size: 1.4MB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 9KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.0MB - Virtual size: 2.5MB

.sedata
Size: 1.4MB - Virtual size: 1.4MB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 9KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB