0e500cebfd692a1002ff0e8d232b74dfb58c52b50ace3ffe0a7aeb55845c11d3

Sharing

Copy URL Twitter E-mail

General

Target

0e500cebfd692a1002ff0e8d232b74dfb58c52b50ace3ffe0a7aeb55845c11d3
Size

147KB
MD5

cf2c56af8adb776e50f0fdf688b9762e
SHA1

8ee0566e587b16de22ce7f3b4dee132b5f96ef5c
SHA256

0e500cebfd692a1002ff0e8d232b74dfb58c52b50ace3ffe0a7aeb55845c11d3
SHA512

9ae133c2fd6feaeb69dc57acb8e7829e7c87f8465ac086dc67bc97db50857ecf0a06cb654869bd8a1ce8c97c05b895d4b5d6e9dfd57c2658d89dcefc34e05a85
SSDEEP

3072:y6pKhVPWRMgb6/YA8mijlMwNEKANmFehWC4gWP/gNHSx9:y6pKhVPWRMgb6/YA8mijlMSANBrA/ky7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e500cebfd692a1002ff0e8d232b74dfb58c52b50ace3ffe0a7aeb55845c11d3

Files

0e500cebfd692a1002ff0e8d232b74dfb58c52b50ace3ffe0a7aeb55845c11d3
.exe windows:5 windows x86

4e216a1a3c0f4d4ecc437f83d91bcd7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

glu32

gluBuild2DMipmaps
gluLookAt
gluPerspective

opengl32

glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glColor3ub
glColor4f
glColorMaterial
glDisable
glEnable
glEnd
glFlush
glGenTextures
glHint
glLightModeli
glLightf
glLightfv
glLoadIdentity
glMatrixMode
glPolygonMode
glPopMatrix
glPushMatrix
glRotatef
glShadeModel
glTexCoord2f
glTexParameteri
glVertex3f
glViewport
wglCreateContext
wglDeleteContext
wglMakeCurrent

advapi32

RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW

comctl32

InitCommonControls

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_wcmdln
abort
calloc
cos
exit
fprintf
free
fwrite
malloc
memmove
rand
signal
srand
strncmp
time
vfprintf
wcscat
wcscpy

shell32

ShellAboutW

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
DeleteDC
DeleteObject
GetObjectW
GetStockObject
GetTextExtentPoint32W
SelectObject
SetBkMode
SetPixelFormat
SetTextColor
SwapBuffers
TextOutW

user32

ChangeDisplaySettingsW
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DispatchMessageW
EndDialog
GetClientRect
GetCursorPos
GetDC
GetForegroundWindow
GetMessageW
GetSystemMetrics
GetWindowLongW
InvalidateRect
IsWindow
KillTimer
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
RegisterClassW
ReleaseDC
SendDlgItemMessageW
SetCursor
SetDlgItemInt
SetTimer
ShowWindow
TranslateMessage
ValidateRect

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rossym
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e216a1a3c0f4d4ecc437f83d91bcd7e

Headers

File Characteristics

Imports

glu32

opengl32

advapi32

comctl32

kernel32

msvcrt

shell32

gdi32

user32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 96B

.rdata Size: 2KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 20B

.bss Size: - Virtual size: 11KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 94KB - Virtual size: 93KB

.rossym Size: 29KB - Virtual size: 29KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 96B

.rdata
Size: 2KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 20B

.bss
Size: - Virtual size: 11KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 94KB - Virtual size: 93KB

.rossym
Size: 29KB - Virtual size: 29KB