eac1d5c71d65d5591de4aa1e3e11b4da4bcbe2c21a9c3d2892249c864be550f3

Sharing

Copy URL Twitter E-mail

General

Target

eac1d5c71d65d5591de4aa1e3e11b4da4bcbe2c21a9c3d2892249c864be550f3
Size

14.2MB
MD5

c40ee78fba18ddebd563dc24193f7342
SHA1

e5d748c4f10a2e2ce370038db0025c4084d17b64
SHA256

eac1d5c71d65d5591de4aa1e3e11b4da4bcbe2c21a9c3d2892249c864be550f3
SHA512

34195566293c2bef003687821d4a9f617829891745b123759c5b71e094d8e5fb6eee49333c0a307f171803e67fea7f67fafe83b833e8dcb9034e6381521e4da6
SSDEEP

196608:3AtQL/W3h+sQ+jNRCBg3XKq6i78trdwbdSnpqiZ6m61VPp7IErtNtEvsC7mUzL:N/zsQNg3Xd6i78trdrem6biebtEvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac1d5c71d65d5591de4aa1e3e11b4da4bcbe2c21a9c3d2892249c864be550f3

Files

eac1d5c71d65d5591de4aa1e3e11b4da4bcbe2c21a9c3d2892249c864be550f3
.exe windows:4 windows x86

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
RtlMoveMemory
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

srand
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
atoi
free
malloc
_ftol
rand
strchr
modf
realloc
memmove
strncmp
__CxxFrameHandler

user32

MessageBoxA
wsprintfA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
SetWindowTextA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvmp0
Size: 1024KB - Virtual size: 1024KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp1
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xvmp3
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77ead28c45f6281fcee5a3fda61ff73e

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 4.7MB - Virtual size: 4.7MB

.data Size: 148KB - Virtual size: 386KB

.rsrc Size: 29KB - Virtual size: 29KB

.xvmp0 Size: 1024KB - Virtual size: 1024KB

.xvmp1 Size: 6.7MB - Virtual size: 6.7MB

.xvmp2 Size: 4KB - Virtual size: 4KB

.xvmp3 Size: 40KB - Virtual size: 40KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 4.7MB - Virtual size: 4.7MB

.data
Size: 148KB - Virtual size: 386KB

.rsrc
Size: 29KB - Virtual size: 29KB

.xvmp0
Size: 1024KB - Virtual size: 1024KB

.xvmp1
Size: 6.7MB - Virtual size: 6.7MB

.xvmp2
Size: 4KB - Virtual size: 4KB

.xvmp3
Size: 40KB - Virtual size: 40KB