b69cef49c9a16a276a38e8a8716c69d8024eb1d2640b760d88b1ffe0ac28c6d1

Sharing

Copy URL Twitter E-mail

General

Target

b69cef49c9a16a276a38e8a8716c69d8024eb1d2640b760d88b1ffe0ac28c6d1
Size

3.2MB
MD5

30438992df0c8ee8fb2bdf179084cc58
SHA1

03fe7e97d6c48fb04e6a8908c3a9e93f52c90296
SHA256

b69cef49c9a16a276a38e8a8716c69d8024eb1d2640b760d88b1ffe0ac28c6d1
SHA512

bb05b2feded3c5f6a24538fb5d41a4455b0920f7732337d53503ae60c4a83a6db92857f16afe8a8e5674f07edb434dc30d907698a75c00e25d3abf7f39524e93
SSDEEP

49152:ppA8kkzFp1GpMkW3bgZb4T7xdiCvREkrs6k+:ppA1kZGpIEyxdvvik46

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b69cef49c9a16a276a38e8a8716c69d8024eb1d2640b760d88b1ffe0ac28c6d1

Files

b69cef49c9a16a276a38e8a8716c69d8024eb1d2640b760d88b1ffe0ac28c6d1
.exe windows:4 windows x86

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
RtlMoveMemory
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

srand
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
atoi
free
malloc
_ftol
rand
strchr
modf
realloc
memmove
strncmp
__CxxFrameHandler

user32

MessageBoxA
wsprintfA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
SetWindowTextA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA

Sections

.text
Size: 716KB - Virtual size: 715KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 348KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvmp0
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp3
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 716KB - Virtual size: 715KB

.rdata Size: 348KB - Virtual size: 347KB

.data Size: 104KB - Virtual size: 390KB

.rsrc Size: 36KB - Virtual size: 35KB

.xvmp0 Size: 32KB - Virtual size: 32KB

.xvmp1 Size: 2.0MB - Virtual size: 2.0MB

.xvmp2 Size: 4KB - Virtual size: 4KB

.xvmp3 Size: 40KB - Virtual size: 40KB

.text
Size: 716KB - Virtual size: 715KB

.rdata
Size: 348KB - Virtual size: 347KB

.data
Size: 104KB - Virtual size: 390KB

.rsrc
Size: 36KB - Virtual size: 35KB

.xvmp0
Size: 32KB - Virtual size: 32KB

.xvmp1
Size: 2.0MB - Virtual size: 2.0MB

.xvmp2
Size: 4KB - Virtual size: 4KB

.xvmp3
Size: 40KB - Virtual size: 40KB