88458951e1c5f8a31b1308f8031a047fff0fdbb8ee5156648803250a46ce9a7e

Sharing

Copy URL

Twitter E-mail

General

Target

88458951e1c5f8a31b1308f8031a047fff0fdbb8ee5156648803250a46ce9a7e
Size

12.5MB
MD5

99418584672f53a83413b6d2684bcdca
SHA1

ac0a67308a31ca905ea131d3c656b2e31996dfff
SHA256

88458951e1c5f8a31b1308f8031a047fff0fdbb8ee5156648803250a46ce9a7e
SHA512

12e32223096650587038b20d254c4ff5d3103fe031f3d9d06e0436dc10b0caeef5799bad5831a8b49f4296f888d151574a05de783fad5978c54938deaec2f946
SSDEEP

393216:rbxyJThSs1aPVqm3o0pkVrwVjpfPvl056OKtr:HCT91aPUmY0pIwV9HcKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88458951e1c5f8a31b1308f8031a047fff0fdbb8ee5156648803250a46ce9a7e

Files

88458951e1c5f8a31b1308f8031a047fff0fdbb8ee5156648803250a46ce9a7e
.exe windows:5 windows x86 arch:x86

237394b0d3b192fd6822eecde31c1a9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader

ws2_32

bind

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetMenu
CharUpperBuffW

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseColorA

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m+`
Size: - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.)J_
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kr&
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

237394b0d3b192fd6822eecde31c1a9b

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 4.1MB

.data Size: - Virtual size: 449KB

.m+` Size: - Virtual size: 7.7MB

.)J_ Size: 4KB - Virtual size: 2KB

.kr& Size: 12.5MB - Virtual size: 12.5MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 4.1MB

.data
Size: - Virtual size: 449KB

.m+`
Size: - Virtual size: 7.7MB

.)J_
Size: 4KB - Virtual size: 2KB

.kr&
Size: 12.5MB - Virtual size: 12.5MB

.rsrc
Size: 8KB - Virtual size: 6KB