1eb860dc1d3d07bea9d20f85a7a0ee21

Sharing

Copy URL Twitter E-mail

General

Target

1eb860dc1d3d07bea9d20f85a7a0ee21
Size

172KB
MD5

1eb860dc1d3d07bea9d20f85a7a0ee21
SHA1

e94254c22a332a6f6e063faf6d8d696d7633567f
SHA256

e2e35f0a50e46994752c9d43e9b383d96a9f831db60ba7de528c971224636776
SHA512

1f09ecc77988ff644fb1fe3a6c79e1541335822e4c2a33c3edba67e5a0a7be8e0433fa7728ad335823bfe9edda25407362bfd33fb81f56e97575d34ed08c9166
SSDEEP

3072:03Ne5Rah/8hNrXeVN4TCrVHAQEyj9hjzY4INqOFh+tROGs7:UA+hkhNrG4TCB+4hjzfsqOFyRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb860dc1d3d07bea9d20f85a7a0ee21

Files

1eb860dc1d3d07bea9d20f85a7a0ee21
.dll windows:4 windows x86 arch:x86

0791e51d0f66bd05ddc19fbd3bbf87f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IsChild
GetWindowDC
GetSystemMetrics
ShowScrollBar
OffsetRect
GetSysColor
GetWindowRect
InsertMenuItemA
SetWindowPlacement
PtInRect
EnumChildWindows
GetClassNameA
SetParent
GetLastActivePopup
MsgWaitForMultipleObjects
IsDialogMessageA
GetSubMenu
UnhookWindowsHookEx
CharToOemA
GetActiveWindow
GetClipboardData
CharLowerA
CreateWindowExA
ChildWindowFromPoint
GetScrollInfo
IsWindowVisible
GetMenu
IsWindow
DefWindowProcA
GetDlgItem
BeginPaint
FillRect
SetWindowPos
IsCharLowerA
CharUpperA
GetSysColorBrush
EmptyClipboard
GetDCEx
SetCapture
GetClassInfoA
SetActiveWindow
DispatchMessageW
InflateRect
GetSystemMenu
RemovePropA
GetWindowThreadProcessId
EnableScrollBar
GetClientRect
GetClassLongA
ShowOwnedPopups
SetMenuItemInfoA
SetForegroundWindow
GetKeyboardLayoutNameA
MoveWindow
PeekMessageA
DefFrameProcA
TranslateMessage
SetWindowLongA
KillTimer
MapVirtualKeyA
SendMessageA
GetDesktopWindow
IsWindowEnabled
GetKeyboardType
DrawMenuBar
PostMessageA
GetKeyboardLayout
OpenClipboard
GetCursorPos
RegisterWindowMessageA
DrawIconEx
MessageBoxA
CharUpperBuffA
GetIconInfo
SetCursor
GetKeyNameTextA
PostQuitMessage
MessageBeep
WindowFromPoint
GetWindow
ActivateKeyboardLayout
GetDC
SetClipboardData
DispatchMessageA
RegisterClipboardFormatA
DestroyWindow
DefMDIChildProcA
CreatePopupMenu
EnableMenuItem
GetForegroundWindow
CreateIcon
GetKeyState
SendMessageW
GetMenuItemCount
CallWindowProcA
IsCharUpperA
ReleaseCapture
GetWindowTextA
IsRectEmpty
CharNextW
CallNextHookEx
CharNextA
CloseClipboard
GetScrollPos
SetRect
IntersectRect
GetScrollRange
wsprintfA
GetCapture
SetScrollInfo
IsDlgButtonChecked

kernel32

LoadLibraryA
ExitProcess
lstrcpyA
WriteFile
WideCharToMultiByte
VirtualAlloc

gdi32

GetBkColor
GetBkMode
GetPaletteEntries
GetTextColor
CreateDIBitmap

Exports

Exports

_4lS3IbLoBgCNxj
fepQgB
TUiau
_iE9mz2dCr0zOP@8
_UALZXpOVlTr@4
_eusfc7F@20
_fDbJXp@16
ksrZ2du7560@16
rFrU_SRWKtkWc
_0HFziv@16
_C65sJlw_@12

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0791e51d0f66bd05ddc19fbd3bbf87f4

Headers

File Characteristics

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 148KB

.data Size: 150KB - Virtual size: 149KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 148KB

.data
Size: 150KB - Virtual size: 149KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB