10bd53499462b589e74241ff97d89ccd

Sharing

Copy URL Twitter E-mail

General

Target

10bd53499462b589e74241ff97d89ccd
Size

164KB
MD5

10bd53499462b589e74241ff97d89ccd
SHA1

ddaad5dee8eba88eec0f7a49a1766dc61e98e17c
SHA256

7910e9c6298659b279f262e8bd5e7d0ed8cb0a192d8c535c6694502f3cff19d6
SHA512

e38f0be12b36ef80e679d4836a6e0e654b936ece7de43839c46e38ac7d6b5c1aebf6d397b3ba8facfc52017f5e8d623c922eaf7cc34b982a62750b62360e8970
SSDEEP

3072:uSYRuGO4mTsSMl09VLi1UgDj6W17dss9wCX+ljWInxG9:uvcVW917tRXS9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10bd53499462b589e74241ff97d89ccd

Files

10bd53499462b589e74241ff97d89ccd
.exe windows:4 windows x86 arch:x86

cf1b3ea3ec44c74a05f4ff4c88bdb210

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA
DragQueryFileA

kernel32

HeapAlloc
VirtualAllocEx
EnumCalendarInfoA
LoadResource
CreateThread
GetStringTypeA
LockResource
GetModuleHandleA
VirtualAlloc
GetTickCount
LocalFree
ExitThread
lstrcmpA
GetCPInfo
GetACP
GetLastError
GetDateFormatA
ExitProcess
GetCommandLineA
GetVersionExA
GetProcAddress

gdi32

CreateDIBitmap
GetRgnBox
SelectObject
GetPaletteEntries
SetBkMode
LineTo
GetClipBox
CreateFontIndirectA
CreateCompatibleBitmap

user32

MapWindowPoints
GetWindowPlacement
GetTopWindow
IsWindowEnabled
GetMessagePos
GetKeyState
SetScrollPos
GetCursor
ShowScrollBar
CreateIcon
GetDesktopWindow
GetWindowTextA
GetMenu
GetScrollInfo
GetLastActivePopup
IntersectRect
RemoveMenu
SetTimer
SystemParametersInfoA
CharNextW
MessageBeep
GetFocus
TrackPopupMenu
PeekMessageW
IsDialogMessageW
DefFrameProcA
DrawAnimatedRects
GetSysColor
GetActiveWindow
GetKeyboardLayoutList
GetMenuStringA
GetScrollRange
SetCapture
ClientToScreen
RedrawWindow
EnumThreadWindows
EnableScrollBar
IsWindowUnicode
wsprintfA
OffsetRect
SetWindowLongA
DrawEdge
PeekMessageA
GetForegroundWindow
WindowFromPoint
GetClipboardData
CharUpperBuffA
UnregisterClassA
GetClassNameA
DrawMenuBar
RemovePropA
SendMessageW
GetWindowThreadProcessId
CharToOemA
ChildWindowFromPoint
GetSysColorBrush
SetFocus
EqualRect
GetKeyboardState
GetSystemMenu
GetKeyboardType
DestroyWindow
IsWindowVisible
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
ActivateKeyboardLayout
BeginPaint
DrawFrameControl

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf1b3ea3ec44c74a05f4ff4c88bdb210

Headers

File Characteristics

Imports

version

shell32

kernel32

gdi32

user32

Sections

.text Size: 30KB - Virtual size: 29KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 126KB - Virtual size: 125KB

.data Size: 1KB - Virtual size: 109KB

.tls Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 126KB - Virtual size: 125KB

.data
Size: 1KB - Virtual size: 109KB

.tls
Size: 2KB - Virtual size: 1KB