16b113d56e6a40f9dea67f993d672cac

Sharing

Copy URL

Twitter E-mail

General

Target

16b113d56e6a40f9dea67f993d672cac
Size

261KB
MD5

16b113d56e6a40f9dea67f993d672cac
SHA1

71c336044b5c1452763c2a0f42d1da915728ba06
SHA256

8452fab214900555ddbece7cd93b818708a11b23d54c68f16e97bb8f42c74827
SHA512

3175eb8bf890c292355731c5bc42fd2875086831e16e3539a87e75dc984b5e74dba4e550afd3599ce2c647c32ae6dc89cc11d350e1e8ac13f940e0d90c3921fc
SSDEEP

6144:96aGmgBm3w8gzPjD44e3lJQ8U7OF1sW8dWvYkWGKsHz4wnh:9lP3AzPj84MPQbsfvYov4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16b113d56e6a40f9dea67f993d672cac

Files

16b113d56e6a40f9dea67f993d672cac
.exe windows:4 windows x86 arch:x86

366e5a38496d9a866e75c30e63b77ba3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CharLowerA
GetPropA
WindowFromPoint
PtInRect
CloseClipboard
DispatchMessageA
SendMessageA
GetLastActivePopup
InvalidateRect
GetSubMenu
TranslateMDISysAccel
GetKeyboardLayout
GetMenuItemCount
UnregisterClassA
AdjustWindowRectEx
LoadKeyboardLayoutA
FillRect
SetActiveWindow
IsWindowEnabled
DefMDIChildProcA
GetClassNameA
DefFrameProcA
IsWindowVisible
GetWindow
GetKeyboardType
GetMenu
SetScrollInfo
MapWindowPoints
GetFocus
IsRectEmpty
GetScrollInfo
GetKeyboardState
DrawIcon
EnumWindows
IsWindowUnicode
GetKeyboardLayoutList
CallNextHookEx
GetIconInfo
wsprintfA
RemovePropA
InflateRect
GetClassInfoA
DrawMenuBar
FrameRect
IntersectRect
CharLowerBuffA
SetMenu
GetMessagePos
ActivateKeyboardLayout
GetDCEx
MessageBoxA
BeginPaint
IsDialogMessageW
SetMenuItemInfoA
SetWindowLongA
IsZoomed
GetForegroundWindow
GetMenuStringA
GetMenuItemInfoA
IsWindow
CallWindowProcA
GetCursor
MsgWaitForMultipleObjects
EnableMenuItem
InsertMenuA
SetRect
SetPropA
DeleteMenu
RegisterClipboardFormatA
GetSysColor
SetFocus
TranslateMessage
DestroyIcon
IsChild
GetDlgItem
DrawTextA
IsIconic
CreateMenu
GetDesktopWindow
CharToOemA
GetClientRect
DrawAnimatedRects
SetParent
GetSystemMenu
GetClipboardData
GetWindowLongA
InsertMenuItemA
SetClassLongA
GetDC
CheckMenuItem
IsDialogMessageA
GetKeyboardLayoutNameA
GetClassLongA

gdi32

CreateBitmap
SetBkColor
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CopyEnhMetaFileA
GetObjectA
BitBlt

kernel32

SetEndOfFile
SetFilePointer
lstrlenA
GetProcAddress
LoadLibraryA
SizeofResource
GetModuleHandleA
RaiseException
GetCommandLineW
lstrcmpiA
LocalFree
SetHandleCount
VirtualAllocEx
IsBadHugeReadPtr
SetEvent
MoveFileExA
HeapDestroy
ReadFile
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualQuery
ResetEvent
GetACP
ExitThread
SetLastError
ExitProcess
SetThreadLocale
GetLastError
lstrcpynA
WaitForSingleObject
WriteFile
WideCharToMultiByte

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES50
Size: 512B - Virtual size: 181B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES06
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES72
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES18
Size: 1024B - Virtual size: 657B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES45
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES52
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES40
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES08
Size: 1024B - Virtual size: 767B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

366e5a38496d9a866e75c30e63b77ba3

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Sections

.text Size: 82KB - Virtual size: 82KB

.data Size: 163KB - Virtual size: 163KB

.RES50 Size: 512B - Virtual size: 181B

.RES06 Size: 2KB - Virtual size: 1KB

.RES72 Size: 4KB - Virtual size: 3KB

.RES18 Size: 1024B - Virtual size: 657B

.RES45 Size: 512B - Virtual size: 299B

.RES52 Size: 2KB - Virtual size: 1KB

.RES40 Size: 1024B - Virtual size: 913B

.RES08 Size: 1024B - Virtual size: 767B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 82KB - Virtual size: 82KB

.data
Size: 163KB - Virtual size: 163KB

.RES50
Size: 512B - Virtual size: 181B

.RES06
Size: 2KB - Virtual size: 1KB

.RES72
Size: 4KB - Virtual size: 3KB

.RES18
Size: 1024B - Virtual size: 657B

.RES45
Size: 512B - Virtual size: 299B

.RES52
Size: 2KB - Virtual size: 1KB

.RES40
Size: 1024B - Virtual size: 913B

.RES08
Size: 1024B - Virtual size: 767B

.rsrc
Size: 2KB - Virtual size: 2KB