a095ce482f9e6979c7cecfebdf5e91d2b258c071f417d5dfb57979bb0c5631e9

Sharing

Copy URL Twitter E-mail

General

Target

a095ce482f9e6979c7cecfebdf5e91d2b258c071f417d5dfb57979bb0c5631e9
Size

4.0MB
MD5

b56d28b2e803fc6f59b6a43821dee670
SHA1

85fab36454139e602c208b809c3f70457800fbdf
SHA256

a095ce482f9e6979c7cecfebdf5e91d2b258c071f417d5dfb57979bb0c5631e9
SHA512

a221a05c7d5afec3578f8dad1cb45bf09d2ccd0f1b443490b1c33665c2d569527dd4eb041cd10759c9352ecf7e01967247e2bba4a84eb8eba7e6dbf19c5e0826
SSDEEP

98304:D/Oo+mlt1Sqv0WYLAx/gGAb3EnAGEB+sh5DaCbNkv:ao+evTP2vGIUAD+K5DaGNkv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a095ce482f9e6979c7cecfebdf5e91d2b258c071f417d5dfb57979bb0c5631e9

Files

a095ce482f9e6979c7cecfebdf5e91d2b258c071f417d5dfb57979bb0c5631e9
.exe windows:4 windows x86 arch:x86

f06953f6b88640e11df2e6ea8ff3a3aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

VariantInit

advapi32

RegCloseKey

user32

GetWindowLongW

kernel32

GetVersionExA
GetVersion
GetVersionExA
GetTimeZoneInformation
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

gdi32

SetBkColor

version

GetFileVersionInfoSizeA

mpr

WNetGetConnectionA

ole32

StringFromCLSID

comctl32

ImageList_GetBkColor

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

getpeername

gdiplus

GdipSetInterpolationMode

Sections

W"GTme*f
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

>s-%2uX:
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MMV$?l"r
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

&x!%_'I.
Size: - Virtual size: 72KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AC>HSh7@
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

h3?K`9Hn
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f"Cd/`vD
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

9q0Q1*r:
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7c69ZPJO
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GpO!L2*q
Size: 9KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f06953f6b88640e11df2e6ea8ff3a3aa

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

gdi32

version

mpr

ole32

comctl32

shell32

comdlg32

wsock32

gdiplus

Sections

W"GTme*f Size: - Virtual size: 1.1MB

>s-%2uX: Size: - Virtual size: 8KB

MMV$?l"r Size: - Virtual size: 68KB

&x!%_'I. Size: - Virtual size: 72KB

AC>HSh7@ Size: - Virtual size: 16KB

h3?K`9Hn Size: - Virtual size: 4KB

f"Cd/`vD Size: - Virtual size: 4KB

9q0Q1*r: Size: - Virtual size: 288KB

7c69ZPJO Size: 3.5MB - Virtual size: 3.5MB

GpO!L2*q Size: 9KB - Virtual size: 6.1MB

W"GTme*f
Size: - Virtual size: 1.1MB

>s-%2uX:
Size: - Virtual size: 8KB

MMV$?l"r
Size: - Virtual size: 68KB

&x!%_'I.
Size: - Virtual size: 72KB

AC>HSh7@
Size: - Virtual size: 16KB

h3?K`9Hn
Size: - Virtual size: 4KB

f"Cd/`vD
Size: - Virtual size: 4KB

9q0Q1*r:
Size: - Virtual size: 288KB

7c69ZPJO
Size: 3.5MB - Virtual size: 3.5MB

GpO!L2*q
Size: 9KB - Virtual size: 6.1MB