b2b3d97c26cfd48e12f91b32caf4918022723d6844a9c1336b7d361ae4d8d0e0

Sharing

Copy URL

Twitter E-mail

General

Target

b2b3d97c26cfd48e12f91b32caf4918022723d6844a9c1336b7d361ae4d8d0e0
Size

3.3MB
MD5

5c4bf72c6f736076875704f07b101ed2
SHA1

6a95cd0ea66b63058575d42bd54c03683ae1d6d7
SHA256

b2b3d97c26cfd48e12f91b32caf4918022723d6844a9c1336b7d361ae4d8d0e0
SHA512

c012072610781e742be30286de56e4152d089ff33f7fcd01ee75bd508888e7a78aaf941e1d79f194970c7e2520aff4c28bd882a59665a4668b78babd795bef81
SSDEEP

49152:VjejHBRujyJTZfImki9TYA2dFIe8FIQwNubbeBYh4/fTwXC8K7SFQuSqwjxiui:VYBojmZfImkQMAa36h4TwXCtuQI8iui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2b3d97c26cfd48e12f91b32caf4918022723d6844a9c1336b7d361ae4d8d0e0

Files

b2b3d97c26cfd48e12f91b32caf4918022723d6844a9c1336b7d361ae4d8d0e0
.exe windows:5 windows x86

e8c0b49bce2a59d1fac681c308e76f5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

xinput9_1_0

XInputGetCapabilities

kernel32

GetLastError

user32

keybd_event

winmm

timeGetTime

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmReleaseContext

d3dcompiler_47

D3DCompile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

ws2_32

select

rasapi32

RasGetConnectStatusA

gdi32

LineTo

winspool.drv

OpenPrinterA

ole32

OleInitialize

oleaut32

SafeArrayUnaccessData

comctl32

ImageList_Destroy

wininet

InternetCloseHandle

comdlg32

GetSaveFileNameA

Sections

.text
Size: 214KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8c0b49bce2a59d1fac681c308e76f5a

Headers

DLL Characteristics

File Characteristics

Imports

xinput9_1_0

kernel32

user32

winmm

dwmapi

d3d11

imm32

d3dcompiler_47

msvcrt

iphlpapi

psapi

advapi32

shell32

ws2_32

rasapi32

gdi32

winspool.drv

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: 214KB - Virtual size: 576KB

.sedata Size: 2.9MB - Virtual size: 2.9MB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 191KB - Virtual size: 192KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 214KB - Virtual size: 576KB

.sedata
Size: 2.9MB - Virtual size: 2.9MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 191KB - Virtual size: 192KB

.sedata
Size: 4KB - Virtual size: 4KB