71f391307e343211e6309e856b4f0ab0_exe32[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

71f391307e343211e6309e856b4f0ab0_exe32.exe
Size

456KB
MD5

71f391307e343211e6309e856b4f0ab0
SHA1

7785610d2ca1e66b7b5eab4b67638177763c8ba3
SHA256

e208e77d659028b6e8aaee403159bf258a02166fbeac2234dc7e7f7bc16efb24
SHA512

29f6e1232a3a940f016dacc275626e24e095deffd231edb2372fccd1d1c76023775c7dd2a9f8a87d4f8adab33b327ae5564a5d8f2f16f676ed919a80abd3ee20
SSDEEP

6144:i9ayOI7iaMQTvDMMPr7scnFUgw81WGz9w0z9f1thOA002ulGXK:i9ay77iAzT1WG5w0z9dt9002uIXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f391307e343211e6309e856b4f0ab0_exe32.exe

Files

71f391307e343211e6309e856b4f0ab0_exe32.exe
.exe windows:4 windows x86

76098abb06737090184d70e381699e0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapCreate
HeapFree
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
VirtualAlloc
HeapReAlloc
ExitProcess
GetStdHandle
CreateFileA
CloseHandle
Sleep
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
ResumeThread
SetThreadPriority
CreateThread
ExitThread
TerminateThread
SuspendThread
HeapDestroy
GetFileType
GetEnvironmentStrings
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsA
WideCharToMultiByte
FreeEnvironmentStringsW
GetCurrentProcess
GetModuleFileNameA
UnhandledExceptionFilter
GlobalUnlock
GlobalLock
TerminateProcess
SetStdHandle
SetFilePointer
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersion
GetCommandLineA
GlobalAlloc
OutputDebugStringA
GetLastError
FlushFileBuffers

user32

DestroyWindow
TrackPopupMenu
ClientToScreen
DispatchMessageA
TranslateMessage
IsWindowVisible
GetMessageA
LoadAcceleratorsA
ShowWindow
GetSubMenu
LoadMenuA
LoadImageA
GetSystemMetrics
GetWindowRect
GetDesktopWindow
wsprintfA
EnumChildWindows
SetWindowPos
BringWindowToTop
GetParent
GetClassNameA
SendMessageA
CopyAcceleratorTableA
LoadIconA
MoveWindow
GetCapture
SetCapture
ReleaseCapture
PostQuitMessage
EnableMenuItem
FillRect
SetDlgItemTextA
SetWindowTextA
EndDialog
KillTimer
LoadBitmapA
GetWindowDC
SetWindowRgn
GetWindowRgn
FindWindowExA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetWindowLongA
DefWindowProcA
LoadCursorA
RegisterClassExA
MessageBoxA
SetTimer
CreateWindowExA
SetWindowLongA
GetKeyboardState
MapVirtualKeyA
ToAscii
GetKeyState
GetClientRect
DrawTextA
DialogBoxParamA
InvalidateRect
EndPaint
BeginPaint

gdi32

GetTextExtentPoint32A
SelectObject
SetTextColor
StretchDIBits
SetStretchBltMode
GetStockObject
CreateSolidBrush
Rectangle
GetObjectA
TextOutA
SetDIBitsToDevice
BitBlt
CreateCompatibleDC
DeleteDC
CombineRgn
CreateRectRgn
GetDIBits
OffsetRgn
DeleteObject

winmm

timeGetTime

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76098abb06737090184d70e381699e0c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

Sections

.text Size: 124KB - Virtual size: 120KB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 12KB - Virtual size: 74KB

.rsrc Size: 196KB - Virtual size: 194KB

.text
Size: 124KB - Virtual size: 120KB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 12KB - Virtual size: 74KB

.rsrc
Size: 196KB - Virtual size: 194KB