2dc3b84ca6883a26c759f84b1898bcd6683f997f4f41825d8ba7fd582e53dcf7N

Sharing

Copy URL

Twitter E-mail

General

Target

2dc3b84ca6883a26c759f84b1898bcd6683f997f4f41825d8ba7fd582e53dcf7N
Size

1.7MB
MD5

7b5cb7de6416eb42ae809719bdff45c0
SHA1

02ed33368b76d741b59c5d25536c4a659f899973
SHA256

2dc3b84ca6883a26c759f84b1898bcd6683f997f4f41825d8ba7fd582e53dcf7
SHA512

0da7147e244f9a306f55a90b36779a889f8aeb776fe01ce2bbe10c3026ac2002d9e1cde7971421a852a98b3c4c69293424d0091ed23a319944eaa3ebe66161c4
SSDEEP

24576:Cktv3yEXspxJWoqvqKtKupvpkBwmbNqJNN+y2WUMOeW304Uc7ltJFYC:CktKCkJPqv5uBwSMXNzNWEryDFYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2dc3b84ca6883a26c759f84b1898bcd6683f997f4f41825d8ba7fd582e53dcf7N

Files

2dc3b84ca6883a26c759f84b1898bcd6683f997f4f41825d8ba7fd582e53dcf7N
.exe windows:5 windows x86 arch:x86

4b687069219ce1dd2706ea5e2b275cbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

user32

GetKeyboardType
mouse_event

advapi32

RegQueryValueExA
ReportEventA
StartServiceA
QueryServiceConfig2A

oleaut32

SysFreeString
SafeArrayPtrOfIndex

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA
SHGetSpecialFolderLocation

wininet

InternetReadFile

ws2_32

gethostname

wsock32

WSACleanup

winmm

waveInUnprepareHeader

msvfw32

DrawDibDraw

msvcrt

__dllonexit

psapi

GetMappedFileNameW

Sections

CODE
Size: 306KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b687069219ce1dd2706ea5e2b275cbd

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

gdi32

comctl32

shell32

wininet

ws2_32

wsock32

winmm

msvfw32

msvcrt

psapi

Sections

CODE Size: 306KB - Virtual size: 616KB

DATA Size: 16KB - Virtual size: 24KB

BSS Size: - Virtual size: 24KB

.idata Size: 12KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: - Virtual size: 4KB

.reloc Size: - Virtual size: 40KB

.rsrc Size: 7KB - Virtual size: 32KB

.sedata Size: 1.3MB - Virtual size: 1.3MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 12KB

.sedata Size: 4KB - Virtual size: 4KB

CODE
Size: 306KB - Virtual size: 616KB

DATA
Size: 16KB - Virtual size: 24KB

BSS
Size: - Virtual size: 24KB

.idata
Size: 12KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: - Virtual size: 4KB

.reloc
Size: - Virtual size: 40KB

.rsrc
Size: 7KB - Virtual size: 32KB

.sedata
Size: 1.3MB - Virtual size: 1.3MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 12KB

.sedata
Size: 4KB - Virtual size: 4KB