977cdc1b93c0b880102f80233ba31db65ef4fcfdfc23a29305bb3889d88762c7

Sharing

Copy URL

Twitter E-mail

General

Target

977cdc1b93c0b880102f80233ba31db65ef4fcfdfc23a29305bb3889d88762c7
Size

61KB
MD5

63762f8e95ff0eb1765f6a146986cf23
SHA1

05fcec36533c7af580a77936049321ce9f734c9f
SHA256

977cdc1b93c0b880102f80233ba31db65ef4fcfdfc23a29305bb3889d88762c7
SHA512

15c8280acd0b5324457dfb452779aa41eab9ddfae542d4cd38cc3f1eb64c76fb3e9e968f12e40b1a9e1f58f4d7689c9ddc0da599b31379d6e1f67f29a9b47a1e
SSDEEP

384:VAGS3NR9rCX9OdpucbDn9vmlZYJuFyIsZ4hAsx7KJoAdrgHLokdv9X:VeR92m1DntuFFsZ4hAs7KJobLvJh

Score

N/A

Malware Config

Signatures

Files

977cdc1b93c0b880102f80233ba31db65ef4fcfdfc23a29305bb3889d88762c7
.exe windows x86

6bf4a1d576a30184ce4940703da0abab

Code Sign

af:29:1d:5c:6a:e0:4e:2f:9b:d7:5a:8d:2b:49:24:ed:ca:c3:3e:66
Signer

Actual PE Digest

af:29:1d:5c:6a:e0:4e:2f:9b:d7:5a:8d:2b:49:24:ed:ca:c3:3e:66

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01-01-0001 00:00
Valid: false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateThread
Sleep
VirtualAlloc
WideCharToMultiByte
lstrlenW
TerminateProcess
OpenProcess
LCMapStringA
HeapReAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
GetProcAddress
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
FreeLibrary
LCMapStringW
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetModuleHandleA
GetStartupInfoA

user32

GetMessageA
DispatchMessageA
TranslateMessage
GetClassNameA
IsWindowVisible
GetWindowThreadProcessId
GetForegroundWindow
SetTimer
GetWindowTextA
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
MessageBoxA
GetKeyState
KillTimer
EnumWindows
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow

gdi32

GetStockObject

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6bf4a1d576a30184ce4940703da0abab

Code Sign

af:29:1d:5c:6a:e0:4e:2f:9b:d7:5a:8d:2b:49:24:ed:ca:c3:3e:66Signer

Signature Validations

Verification

01-01-0001 00:00 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 928B

af:29:1d:5c:6a:e0:4e:2f:9b:d7:5a:8d:2b:49:24:ed:ca:c3:3e:66
Signer

01-01-0001 00:00
Valid: false

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 928B