028831bdd26f659c6109528b6f7d9e48

Sharing

Copy URL Twitter E-mail

General

Target

028831bdd26f659c6109528b6f7d9e48
Size

408KB
MD5

028831bdd26f659c6109528b6f7d9e48
SHA1

e1d44ae6a1fabb59ce468365375535f8d5b46f16
SHA256

7bf482757d023cc107a94f6eeecbf2ecf6c1bb1b70cc518f2d7645c55e512b8f
SHA512

a0eaf63c14c193f4c1593c9d0ad7c67d503f654376a55dab26556be9125fc46ddd18df327683c0a25c8084b83ec02192d5dada8b80fead88c89c973bfbebe5a8
SSDEEP

12288:L6g+xhpPSeCOMYAG2pyAz4k2026fW+4gMLTbVTE4:L6gISeCOTAG2pHMV0lW+EVTE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
028831bdd26f659c6109528b6f7d9e48

Files

028831bdd26f659c6109528b6f7d9e48
.exe windows:4 windows x86 arch:x86

b94c31b253b275126c975bdb83f42c76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

CreateBitmap
GetCurrentPositionEx
CopyEnhMetaFileA
BitBlt

kernel32

VirtualAlloc
SetHandleCount
SetEndOfFile
lstrcatA
LoadLibraryExA
ResetEvent
VirtualFree
WriteFile
GetACP
VirtualQuery
LoadLibraryA
SetFilePointer
MulDiv
VirtualAllocEx
lstrcpyA
lstrcmpiA
IsBadHugeReadPtr
GetVersionExA
RaiseException
ExitThread
MoveFileA
LocalReAlloc
WaitForSingleObject
GetModuleHandleW
GetCommandLineA
GetProcAddress
GetCommandLineW
ExitProcess
LocalAlloc
lstrlenA
SetEvent
lstrcpynA
SizeofResource
WideCharToMultiByte
IsBadReadPtr
GetModuleHandleA
SetLastError

user32

GetDC
GetWindowTextA
GetParent
IsWindow
GetSubMenu
MsgWaitForMultipleObjects
KillTimer
GetLastActivePopup
SendMessageA
GetMenuStringA
CreateIcon
LoadBitmapA
SetScrollPos
EnableMenuItem
CharToOemA
GetCursorPos
GetMenuItemCount
IsWindowVisible
SetMenu
GetIconInfo
IntersectRect
InsertMenuItemA
GetMessagePos
TrackPopupMenu
SetClipboardData
GetWindowLongA
LoadIconA
DispatchMessageW
GetSysColor
SetForegroundWindow
GetClipboardData
DrawMenuBar
GetClassInfoA
ScreenToClient
SetWindowLongW
GetKeyboardLayoutList
RegisterClassA
RemoveMenu
GetActiveWindow
CharLowerA
EqualRect
SetCapture
DispatchMessageA
GetForegroundWindow
ClientToScreen
InflateRect
GetDesktopWindow
GetDCEx
GetWindowThreadProcessId
DestroyIcon
GetClassNameA
GetMenuItemID
IsRectEmpty
GetKeyboardState
GetWindowPlacement
ReleaseCapture
GetDlgItem
GetScrollPos
GetScrollRange
SetWindowLongA
GetTopWindow
PostMessageA
GetKeyboardLayout
IsDialogMessageW
RemovePropA
PeekMessageA
GetScrollInfo
GetMenu
CreateMenu
UnhookWindowsHookEx
SetScrollInfo
CallNextHookEx
DrawFrameControl
GetClassLongA
PtInRect
GetSysColorBrush
SetFocus
GetMenuItemInfoA
EndPaint
DrawTextA
IsIconic
SetRect
IsDialogMessageA
CharLowerBuffA
InvalidateRect
EnableScrollBar
GetCursor
SetWindowTextA
GetWindowLongW
PostQuitMessage
IsChild
SetParent
WaitMessage

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES77
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES52
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES18
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES74
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES91
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES08
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES96
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES54
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b94c31b253b275126c975bdb83f42c76

Headers

File Characteristics

Imports

gdi32

kernel32

user32

Sections

.text Size: 79KB - Virtual size: 78KB

DATA Size: 312KB - Virtual size: 311KB

.RES77 Size: 1KB - Virtual size: 1KB

.RES52 Size: 2KB - Virtual size: 1KB

.RES18 Size: 5KB - Virtual size: 4KB

.RES74 Size: 1024B - Virtual size: 559B

.RES91 Size: 512B - Virtual size: 78B

.RES08 Size: 1KB - Virtual size: 1KB

.RES96 Size: 1KB - Virtual size: 1KB

.RES54 Size: 1024B - Virtual size: 993B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 79KB - Virtual size: 78KB

DATA
Size: 312KB - Virtual size: 311KB

.RES77
Size: 1KB - Virtual size: 1KB

.RES52
Size: 2KB - Virtual size: 1KB

.RES18
Size: 5KB - Virtual size: 4KB

.RES74
Size: 1024B - Virtual size: 559B

.RES91
Size: 512B - Virtual size: 78B

.RES08
Size: 1KB - Virtual size: 1KB

.RES96
Size: 1KB - Virtual size: 1KB

.RES54
Size: 1024B - Virtual size: 993B

.rsrc
Size: 2KB - Virtual size: 2KB