c64f87cc24d2a3da83196b10166eb513efeba88ae959738239a0950af68c397d

Sharing

Copy URL Twitter E-mail

General

Target

c64f87cc24d2a3da83196b10166eb513efeba88ae959738239a0950af68c397d
Size

11.2MB
MD5

0edb33c86314afdb930cd962cdb582e7
SHA1

72af644745ae65e52d2b28f143fd78b5807ea5de
SHA256

c64f87cc24d2a3da83196b10166eb513efeba88ae959738239a0950af68c397d
SHA512

08c923b7ad3a92f14d0aa7c5a91407134e9e70ba29d22f92b5ee543e0974d1825659920ff613fbe3fd41db854794822245008a78e7ada99fb1fd599835b30cb5
SSDEEP

196608:DmzEd1ve3ipFFNnrOadlHWDpRFQmKREAr/x9z87szC+KCvxRvDfq+:q4XvlFNLdlcPAr/x9zLzN++

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c64f87cc24d2a3da83196b10166eb513efeba88ae959738239a0950af68c397d

Files

c64f87cc24d2a3da83196b10166eb513efeba88ae959738239a0950af68c397d
.exe windows:5 windows x86 arch:x86

879056b3b0ba75c34c70209d20925d2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

GetMenuItemCount

gdi32

CreatePalette

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

Sections

.text
Size: - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tvmp0
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tvmp1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tvmp2
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

879056b3b0ba75c34c70209d20925d2d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

ws2_32

comdlg32

Sections

.text Size: - Virtual size: 614KB

.rdata Size: - Virtual size: 540KB

.data Size: - Virtual size: 279KB

.tvmp0 Size: - Virtual size: 6.3MB

.tvmp1 Size: 4KB - Virtual size: 2KB

.tvmp2 Size: 11.2MB - Virtual size: 11.2MB

.rsrc Size: 56KB - Virtual size: 54KB

.text
Size: - Virtual size: 614KB

.rdata
Size: - Virtual size: 540KB

.data
Size: - Virtual size: 279KB

.tvmp0
Size: - Virtual size: 6.3MB

.tvmp1
Size: 4KB - Virtual size: 2KB

.tvmp2
Size: 11.2MB - Virtual size: 11.2MB

.rsrc
Size: 56KB - Virtual size: 54KB