49619d6e8d49c7768c795aef3fe52e50_exe32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

49619d6e8d49c7768c795aef3fe52e50_exe32.exe
Size

594KB
MD5

49619d6e8d49c7768c795aef3fe52e50
SHA1

641e3a94b10269535412b23576e17bd120467c4c
SHA256

6f9e067a632b3cf45a5660487bc6594b1cdd56207381dac434c88109cf657918
SHA512

1e671cd3de9627c64321b60452bab4ec5cb0a00d551f86583a50bb1209744b6265db95ad84e3c37fe92e912880ae7e08037fa44cdddb97fbf964cbb98910305a
SSDEEP

12288:o45xRK7vxNnJ5UKoT4vwnLcfb881OrjHOB/99Bvz2:vRKDR5UwvwLef1EjHS/U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49619d6e8d49c7768c795aef3fe52e50_exe32.exe

Files

49619d6e8d49c7768c795aef3fe52e50_exe32.exe
.exe windows:5 windows x86

d180a4fcaeda1b363dcde9729ef60e77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx
EnumWindows
IsIconic
SetForegroundWindow
GetLastActivePopup
FindWindowA
GetForegroundWindow
GetWindowThreadProcessId
ShowWindow
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
DefWindowProcA
PostQuitMessage
IsWindowVisible
InvalidateRect
UpdateWindow
BeginPaint
FillRect
LoadImageA
DrawTextExA
EndPaint
GetDesktopWindow
GetWindowRect
SetWindowPos
MessageBoxA
MessageBoxW

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA

comctl32

ord17

gdi32

SetTextColor
GetDeviceCaps
TextOutA
SetBkMode
GetBkMode
DeleteDC
DeleteObject
BitBlt
GetStockObject
SelectObject
CreateCompatibleBitmap
CreateFontIndirectA
CreateCompatibleDC

kernel32

GetOEMCP
GetACP
GetCPInfo
HeapCreate
IsValidCodePage
VirtualAlloc
VirtualFree
SetHandleCount
DeleteCriticalSection
LCMapStringW
LoadLibraryW
SetEnvironmentVariableW
GetTimeZoneInformation
GetFileAttributesW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
WriteConsoleA
SetStdHandle
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEndOfFile
HeapReAlloc
GetEnvironmentStringsW
CreateFileW
SetFilePointer
GetLastError
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateFileA
CreateDirectoryA
GetLongPathNameW
ExitProcess
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
FindFirstFileW
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetModuleFileNameW
GetWindowsDirectoryA
GetLongPathNameA
GetEnvironmentVariableA
GetTempPathA
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
GetTempFileNameA
GetFullPathNameW
GetFullPathNameA
FreeEnvironmentStringsW
GetProcessHeap
FreeEnvironmentStringsA
GetEnvironmentStrings
GetConsoleOutputCP
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
SetEnvironmentVariableA
SearchPathA
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
ReleaseSemaphore
CreateSemaphoreA
GetCommandLineW
Sleep
MulDiv
ExitThread
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceA
SetConsoleTitleA
GetTickCount
GetConsoleTitleA
AllocConsole
GetModuleHandleA
CreateProcessW
SetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
CreateDirectoryW
RemoveDirectoryW
HeapAlloc
HeapFree
WriteConsoleW
GetFileType
GetStdHandle
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d180a4fcaeda1b363dcde9729ef60e77

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

comctl32

gdi32

kernel32

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 7KB - Virtual size: 84KB

.rsrc Size: 400KB - Virtual size: 400KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 7KB - Virtual size: 84KB

.rsrc
Size: 400KB - Virtual size: 400KB

.reloc
Size: 10KB - Virtual size: 10KB