1e1e56bcf408d5b793addc545f2621a0

Sharing

Copy URL Twitter E-mail

General

Target

1e1e56bcf408d5b793addc545f2621a0
Size

165KB
MD5

1e1e56bcf408d5b793addc545f2621a0
SHA1

55b064c0799f4d44dcaa3b3d0121d9c223caae29
SHA256

07c743d8d75abf4f6104fc5b89419096620b61e83ec82ea7319605fb8dd69953
SHA512

6b6424d62f7d6e72b4b089debe3cbbe542d58f32f7d2c25a2f92950d80e7836be51853bc09ee956b641247cc737f723d212e4e7c4f2dbd16907b45abfb22ca2d
SSDEEP

3072:RcYefGjZSQLtgVRH5/VnbN0pMPDVvtH1oxYYlQyrz08qbTIqdWOwf8DkzXo2L:ZefG9xtgHH5/VbNAKDdo2mrzOoqwzS0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e1e56bcf408d5b793addc545f2621a0

Files

1e1e56bcf408d5b793addc545f2621a0
.exe windows:5 windows x86 arch:x86

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
free
_initterm
malloc
wcscmp
_except_handler3
_adjust_fdiv

gdi32

GetObjectW
SelectObject
CreateCompatibleDC
LineTo
MoveToEx
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SelectPalette
CreateHalftonePalette
GetDeviceCaps
StretchBlt
CreateFontIndirectW
GetTextExtentPoint32W
SetLayout
SetTextColor
SetBkMode
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
CreatePen
Rectangle
Arc
Ellipse
CreatePenIndirect
SetBkColor
SetROP2
GetStockObject
DeleteDC
DeleteObject

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GlobalAlloc
GlobalUnlock
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
FreeLibraryAndExitThread
GetCurrentThreadId
Sleep
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
DuplicateHandle
ResetEvent
GetModuleFileNameW
GetWindowsDirectoryW
CreateMutexW
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseMutex
CompareStringW
lstrcmpW
MoveFileW
CopyFileW
DeleteFileW
lstrcpynW
MulDiv
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
QueryPerformanceCounter
CreateEventW
CloseHandle
CreateThread
SetEvent
IsBadWritePtr
MultiByteToWideChar
lstrcpyW
lstrlenW
GetLastError
GetModuleHandleW
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
GlobalLock
LocalFree
LocalAlloc
ExitThread

ole32

CoUnmarshalInterface
CLSIDFromString
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
FreePropVariantArray
CoTaskMemAlloc
PropVariantClear
CoAllowSetForegroundWindow
CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

SysFreeString
SysAllocString
SysAllocStringLen

shell32

SHGetFileInfoW
DragQueryFileW

shlwapi

StrFormatByteSizeW
wnsprintfA

user32

CharNextW
MessageBeep
SetWindowsHookExW
LoadAcceleratorsW
CopyAcceleratorTableW
CreateAcceleratorTableW
KillTimer
DestroyAcceleratorTable
UnhookWindowsHookEx
MessageBoxW
PostThreadMessageW
CallNextHookEx
IsChild
TranslateAcceleratorW
LoadIconW
GetKeyState
OffsetRect
IntersectRect
CopyRect
MoveWindow
IsRectEmpty
IsWindowVisible
PostMessageW
RegisterWindowMessageW
FrameRect
GetWindowTextLengthW
GetWindowTextW
DrawFocusRect
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
PtInRect
SendNotifyMessageW
SetTimer
MapWindowPoints
GetParent
SetDlgItemInt
ShowWindow
SetWindowTextW
GetFocus
SetFocus
GetSystemMetrics
LoadImageW
SetDlgItemTextW
SendDlgItemMessageW
CharUpperBuffW
EnableWindow
LoadCursorW
SetCursor
GetDlgItem
SendMessageW
EndDialog
GetWindowRect
GetDC
ReleaseDC
CopyIcon
RegisterClassW
GetWindowLongW
SetWindowLongW
DefWindowProcW
IsWindowEnabled
InvalidateRect
UpdateWindow
BeginPaint
GetClientRect
GetSysColorBrush
FillRect
EndPaint
DestroyIcon
LoadStringW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MapDialogRect
PostQuitMessage
DestroyWindow
EnableMenuItem
GetSystemMenu
SetForegroundWindow
DispatchMessageW
CharUpperW
TranslateMessage
IsDialogMessageW
GetMessageW
DialogBoxParamW
GetDlgItemInt
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
GetIconInfo
FindWindowExW
SetWindowPos
GetMonitorInfoW
MonitorFromRect
GetDesktopWindow
IsWindow
DrawTextExW
InflateRect
DrawIconEx
GetSysColor
MonitorFromWindow
GetClassNameW
DrawTextW
WinHelpW
GetLastActivePopup
CreateWindowExW
CreateDialogParamW
RegisterClassExW

winmm

PlaySoundW

gdiplus

GdipCloneImage
GdipDrawImageRectRectI
GdipGetImageGraphicsContext
GdipSetImageAttributesThreshold
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

advapi32

RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AAAJ
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.AAAA
Size: 343KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9b78de2e463cefc2d69dd1fb6426727

Headers

File Characteristics

Imports

msvcrt

gdi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

winmm

gdiplus

msimg32

advapi32

Sections

.text Size: 15KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 8KB

.data Size: 2KB - Virtual size: 8KB

.AAAJ Size: 512B - Virtual size: 4KB

.AAAA Size: 343KB - Virtual size: 392KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 8KB

.data
Size: 2KB - Virtual size: 8KB

.AAAJ
Size: 512B - Virtual size: 4KB

.AAAA
Size: 343KB - Virtual size: 392KB

.rsrc
Size: 4KB - Virtual size: 3KB