78e99a0da1976aa5f254da21a356f9dc95ad63db54589b97eb9688efdca757fa

Sharing

Copy URL Twitter E-mail

General

Target

78e99a0da1976aa5f254da21a356f9dc95ad63db54589b97eb9688efdca757fa
Size

10.8MB
MD5

98bb3c7482b339fda721d71dfa5fb8ab
SHA1

0b28d17e88c420287bfc0c3278cff17f37342afa
SHA256

78e99a0da1976aa5f254da21a356f9dc95ad63db54589b97eb9688efdca757fa
SHA512

7ae0fdd00d356f76ec92ba3b9bd0cee005eb4794ef1922329ed3d56cc1e6b27192611e74e9568a9ae87fd115b8a25cad42bbbb6b57c381f4f9627245a7381cfd
SSDEEP

196608:nQmxXtxmc7JN/lh4TMzTw45y8gyYO8GxIj6g1aH0FVeMr9kvRbXjkiT4oBpcgxEE:nQmlTXhwMzT28oOIj6iaOVeMRyRbAiTv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e99a0da1976aa5f254da21a356f9dc95ad63db54589b97eb9688efdca757fa

Files

78e99a0da1976aa5f254da21a356f9dc95ad63db54589b97eb9688efdca757fa
.exe windows:5 windows x86 arch:x86

b290fd9d6ec0d50440756ee1fec19769

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 589KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tvmp0
Size: - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tvmp1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tvmp2
Size: 10.8MB - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b290fd9d6ec0d50440756ee1fec19769

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 589KB

.rdata Size: - Virtual size: 80KB

.data Size: - Virtual size: 247KB

.tvmp0 Size: - Virtual size: 6.1MB

.tvmp1 Size: 4KB - Virtual size: 2KB

.tvmp2 Size: 10.8MB - Virtual size: 10.8MB

.rsrc Size: 72KB - Virtual size: 69KB

.text
Size: - Virtual size: 589KB

.rdata
Size: - Virtual size: 80KB

.data
Size: - Virtual size: 247KB

.tvmp0
Size: - Virtual size: 6.1MB

.tvmp1
Size: 4KB - Virtual size: 2KB

.tvmp2
Size: 10.8MB - Virtual size: 10.8MB

.rsrc
Size: 72KB - Virtual size: 69KB