c37be8116dd743c8dbe6fe63f7e439f5d6942a4ef48b53a4c3a17cb6560502e9

Sharing

Copy URL

Twitter E-mail

General

Target

c37be8116dd743c8dbe6fe63f7e439f5d6942a4ef48b53a4c3a17cb6560502e9
Size

13.8MB
MD5

40ca2fc14c95c3685a0c29c4ed224921
SHA1

087228d613c9326389806cce77abdbb9e938c39c
SHA256

c37be8116dd743c8dbe6fe63f7e439f5d6942a4ef48b53a4c3a17cb6560502e9
SHA512

065eade30e41d029ac33adcba2bb86432c3dc6e8e846123225586147d16effb03880accf06aa1d9227387ad6a88822abc0f0fd2d918174a614bd2dbc5288809d
SSDEEP

196608:BT4A6oM0v/E5QPEc2rTbT//q2seFVRuFaQzvTjUvtspQ6L461VPp7IErtNtEvsCS:5I0EWzST//NseF+zCajL46biebtEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c37be8116dd743c8dbe6fe63f7e439f5d6942a4ef48b53a4c3a17cb6560502e9

Files

c37be8116dd743c8dbe6fe63f7e439f5d6942a4ef48b53a4c3a17cb6560502e9
.exe windows:4 windows x86

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
RtlMoveMemory
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

srand
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
atoi
free
malloc
_ftol
rand
strchr
modf
realloc
memmove
strncmp
__CxxFrameHandler

user32

MessageBoxA
wsprintfA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
SetWindowTextA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvmp0
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp1
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp3
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 4.6MB - Virtual size: 4.6MB

.data Size: 148KB - Virtual size: 386KB

.rsrc Size: 29KB - Virtual size: 29KB

.xvmp0 Size: 940KB - Virtual size: 940KB

.xvmp1 Size: 6.5MB - Virtual size: 6.5MB

.xvmp2 Size: 4KB - Virtual size: 4KB

.xvmp3 Size: 40KB - Virtual size: 40KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 4.6MB - Virtual size: 4.6MB

.data
Size: 148KB - Virtual size: 386KB

.rsrc
Size: 29KB - Virtual size: 29KB

.xvmp0
Size: 940KB - Virtual size: 940KB

.xvmp1
Size: 6.5MB - Virtual size: 6.5MB

.xvmp2
Size: 4KB - Virtual size: 4KB

.xvmp3
Size: 40KB - Virtual size: 40KB