1ed771279b9f6dde28c82657276240b9

General

Target

1ed771279b9f6dde28c82657276240b9
Size

62KB
MD5

1ed771279b9f6dde28c82657276240b9
SHA1

4182f7b0568bfbd9aaa4016b253e6475ca1df206
SHA256

75e852d36f66dd4a65f989b1276ad2c0ed6b2f120684cdcfb06748c8c33bd78b
SHA512

0b4551982d21f89c9178d221520533c6e87201ce50451bfbe7f532091e9c266136f4b631c57200e68112abf29c39bdb7d9d192fa27166f1d8b71f5a7cad3a1dc
SSDEEP

1536:CGPegsVpDKNSf+owoS9Po8TwYwMPtd/BqDIkp:ddCpKM+oGBbw6td/BWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed771279b9f6dde28c82657276240b9

Files

1ed771279b9f6dde28c82657276240b9
.exe windows:5 windows x86 arch:x86

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
FillRect
GetCapture
GetWindowLongA
GetMenuItemCount
GetWindowDC
ChangeMenuA
GetDC
GetClientRect
GetForegroundWindow
SetFocus
GetDlgCtrlID
GetWindow
CheckDlgButton
GetMessagePos
GetSysColorBrush
EndPaint
SetWindowLongW
GetActiveWindow
DragObject
GetParent

ole32

CoCreateInstance
GetHGlobalFromStream
OleSaveToStream
StringFromGUID2
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleRegGetUserType
ProgIDFromCLSID
BindMoniker

kernel32

GetExitCodeThread
GetCurrentProcessId
lstrlenW
SetHandleCount
OpenMutexA
IsValidCodePage
ExitProcess
GetOEMCP
IsDBCSLeadByte
lstrcatW
DeleteFileA
GetLastError
VirtualAlloc
FindResourceA
DeleteFileW
GetFileAttributesA
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalLock
GetLocalTime

msvcrt

__p__osver
isalpha
wcsrchr
__p__iob
time
__p__commode
rand
_ltow
malloc
swprintf
qsort
__set_app_type
_finite
__setusermatherr
swscanf
wcsncmp
_rotl
srand
atoi
wcsncpy
__wgetmainargs
__p__fmode
_exit

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 485B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3297f6daf3f7338bfe0a45be886ec9e0

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 26KB - Virtual size: 87KB

.reloc Size: 512B - Virtual size: 485B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 26KB - Virtual size: 87KB

.reloc
Size: 512B - Virtual size: 485B