1326dd2eba27874a076cac528e84c237

Sharing

Copy URL Twitter E-mail

General

Target

1326dd2eba27874a076cac528e84c237
Size

830KB
MD5

1326dd2eba27874a076cac528e84c237
SHA1

b0c2065c861eda3df617fb059d1ca13accd2dc44
SHA256

7dddde3160bbb66f0f7cff44e28c2d7f11749886257f2176112e51ccbea6c71b
SHA512

c393e3d30d8da05fb383d54699b5138752a3dc21c0f6ac835fe4a51f28cd5ba6700c093955ab51e934640ccf57f430c311d10a1a9548620a2613db689c4dbed6
SSDEEP

24576:AD7KKIM2+AFZJO3BGr9Y2axLvUOyzzgeSxcV2+Q4B5kAQ:AvKJFWwrwzUOyzceSxK2+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1326dd2eba27874a076cac528e84c237

Files

1326dd2eba27874a076cac528e84c237
.exe windows:5 windows x86 arch:x86

e565baf437a53908282c1fad5c19e460

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wexecl
_outp
??4exception@@QAEAAV0@ABV0@@Z
iswdigit
_mbsnbicmp
_ismbcalnum
_CIexp
_wspawnvp
_strlwr
__p__wpgmptr
_mbsdup
_acmdln
??0bad_cast@@QAE@PBD@Z
_spawnv
_putch
??_Gexception@@UAEPAXI@Z
_ismbbtrail
_get_sbh_threshold
fgetc
__p__pgmptr
__lc_codepage
__set_app_type
_Getdays
_get_osfhandle
_strdate
_strtoui64
__getmainargs
exit
_getdcwd
__p__commode

user32

GetCursorPos
PostQuitMessage
RegisterHotKey
DefWindowProcW
WINNLSEnableIME
SetForegroundWindow
GetMessageA
GetAltTabInfoW
TranslateAccelerator
UnregisterClassA
DestroyMenu
GetThreadDesktop
GetClipboardOwner
AnimateWindow
SetTaskmanWindow
GetParent
CheckMenuRadioItem
EnterReaderModeHelper
HiliteMenuItem
ChildWindowFromPointEx
CtxInitUser32
LoadCursorFromFileA
OpenInputDesktop
DrawEdge
DrawTextA
GetWindowPlacement
GetDlgItemInt
GetTabbedTextExtentA
DdeReconnect
RegisterClassW
DrawCaption
GetRawInputDeviceList

kernel32

GetCurrentThread
TlsFree
SetConsoleActiveScreenBuffer
Process32Next
BindIoCompletionCallback
FoldStringA
GetConsoleSelectionInfo
SleepEx
GlobalFix
DelayLoadFailureHook
GetModuleHandleW
SetEnvironmentVariableW
SetConsoleCursor
GetUserDefaultUILanguage
DnsHostnameToComputerNameA
QueryPerformanceCounter
LoadLibraryW
GetLogicalDrives
BackupWrite
OpenSemaphoreA
SetFileAttributesA
CancelWaitableTimer
WriteFileGather
WaitNamedPipeA
GetLocaleInfoW
GetStringTypeExW
TerminateJobObject

cfgmgr32

CM_Get_Resource_Conflict_DetailsA
CM_Add_Empty_Log_Conf_Ex
CM_Register_Device_Interface_ExW
CM_Get_Device_Interface_List_SizeA
CM_Detect_Resource_Conflict
CM_Get_Resource_Conflict_DetailsW
CM_Get_Device_ID_List_ExA
CM_Free_Log_Conf

gdi32

STROBJ_bEnumPositionsOnly
EngCreateDeviceSurface
GdiSetPixelFormat
GetRelAbs
GdiEntry2
GetCharWidthA
GdiConvertBitmap
EngLoadModule
LineTo
GetFontData
AddFontResourceExW
SetDeviceGammaRamp
EngFillPath
RemoveFontResourceW
CopyMetaFileA
GdiSetAttrs

msls31

LsFinishCurrentSubline
LsdnSkipCurTab
LsdnResolvePrevTab
LssbGetDurTrailInSubline
LsCreateLine
LsCreateContext
LsGetMinDurBreaks
LsResetRMInCurrentSubline
LsQueryLinePointPcp
LsdnFinishByPen
LsForceBreakSubline
LsModifyLineHeight
LsdnSetAbsBaseLine

Sections

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e565baf437a53908282c1fad5c19e460

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

cfgmgr32

gdi32

msls31

Sections

.text Size: 360KB - Virtual size: 360KB

.rdata Size: 114KB - Virtual size: 113KB

.data Size: 157KB - Virtual size: 1.6MB

.rsrc Size: 196KB - Virtual size: 196KB

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 360KB - Virtual size: 360KB

.rdata
Size: 114KB - Virtual size: 113KB

.data
Size: 157KB - Virtual size: 1.6MB

.rsrc
Size: 196KB - Virtual size: 196KB

.reloc
Size: 1024B - Virtual size: 840B