03b6861243da90427561eb51e190d7b8

Sharing

Copy URL Twitter E-mail

General

Target

03b6861243da90427561eb51e190d7b8
Size

244KB
MD5

03b6861243da90427561eb51e190d7b8
SHA1

f514f64e28c4117bd9b72d36e19e1b79546d2436
SHA256

7bfada046138315413136de4b7d517ab65f335db14771da9f9cd2fec70bdc068
SHA512

66d78c83f713f2daa6be1c26c74a6970c73af5e0aef74fe58a7f3dd73a666535f1d54b7c6d70267351d2a4fa3bea2259920a917a3c2fb39080b6fd1d1a246c6e
SSDEEP

6144:zOUj+bBvkSHQeZdz+654mEDvf9pd7ngyqhY:zOUj+bBDHLZdK6amEDNVcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b6861243da90427561eb51e190d7b8

Files

03b6861243da90427561eb51e190d7b8
.exe windows:4 windows x86 arch:x86

5eaf29cc37afb1fa36093dd85e68f46c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
lstrcmpiA
SetFilePointer
RaiseException
ExitProcess
lstrcatA
lstrlenA
SizeofResource
IsBadReadPtr
ExitThread
lstrcpyA
MulDiv
GetVersionExA
LocalReAlloc
GetModuleHandleA
VirtualAlloc
IsBadHugeReadPtr
WriteFile
LoadLibraryExA
GetCommandLineA
GetProcAddress
SetHandleCount
VirtualFree
LoadLibraryA
SetLastError
VirtualQuery
WideCharToMultiByte
MoveFileA
SetThreadLocale
GetCommandLineW
SetErrorMode
lstrcmpA
LocalFree

gdi32

CreateDIBitmap
CopyEnhMetaFileA
SaveDC
CreateBitmap
GetDIBColorTable
SetPixel
BitBlt

user32

SendMessageA
SetPropA
GetClientRect
CharLowerBuffA
WindowFromPoint
RemoveMenu
FrameRect
CreatePopupMenu
MoveWindow
GetFocus
GetMenuItemCount
GetScrollRange
CharNextA
SetForegroundWindow
InvalidateRect
GetClassNameA
InsertMenuA
CharUpperBuffA
SetWindowsHookExA
GetMenuItemInfoA
TranslateMDISysAccel
ReleaseCapture
CharLowerA
GetScrollInfo
GetMenuStringA
GetMenuState
GetForegroundWindow
IsChild
EnumWindows
DefWindowProcA
DrawTextA
GetMessagePos
GetWindowLongA
GetClipboardData
GetCursor
DrawMenuBar
DrawIcon
DrawFrameControl
PostMessageA
IsWindowUnicode
DrawEdge
GetIconInfo
ShowWindow
GetKeyboardLayout
SetMenu
SetWindowTextA
IntersectRect
SetWindowLongA
GetWindowRect
ScrollWindow
IsDialogMessageW
SetScrollInfo
GetWindowDC
GetKeyboardState
GetWindow
GetMenuItemID
IsIconic
EnumChildWindows
wsprintfA
GetKeyState
IsWindowVisible
IsRectEmpty
IsZoomed
GetKeyboardType
DestroyWindow
MapWindowPoints
GetSysColor
GetSystemMetrics
GetDesktopWindow
DrawIconEx
EnableMenuItem
EndPaint
GetParent
DestroyIcon
OffsetRect
GetTopWindow
GetMenu
TranslateMessage
RemovePropA
IsWindowEnabled
CreateMenu
EnableScrollBar
PeekMessageA
RegisterClipboardFormatA
DeleteMenu
ReleaseDC
GetScrollPos
GetWindowThreadProcessId
GetWindowLongW
GetSysColorBrush
EqualRect

Sections

CODE
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES72
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES77
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES43
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES99
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES16
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES23
Size: 512B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES11
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RES89
Size: 1024B - Virtual size: 791B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eaf29cc37afb1fa36093dd85e68f46c

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Sections

CODE Size: 73KB - Virtual size: 73KB

.data Size: 157KB - Virtual size: 157KB

.RES72 Size: 1024B - Virtual size: 544B

.RES77 Size: 1024B - Virtual size: 533B

.RES43 Size: 3KB - Virtual size: 3KB

.RES99 Size: 512B - Virtual size: 119B

.RES16 Size: 512B - Virtual size: 109B

.RES23 Size: 512B - Virtual size: 139B

.RES11 Size: 1KB - Virtual size: 1KB

.RES89 Size: 1024B - Virtual size: 791B

.rsrc Size: 2KB - Virtual size: 2KB

CODE
Size: 73KB - Virtual size: 73KB

.data
Size: 157KB - Virtual size: 157KB

.RES72
Size: 1024B - Virtual size: 544B

.RES77
Size: 1024B - Virtual size: 533B

.RES43
Size: 3KB - Virtual size: 3KB

.RES99
Size: 512B - Virtual size: 119B

.RES16
Size: 512B - Virtual size: 109B

.RES23
Size: 512B - Virtual size: 139B

.RES11
Size: 1KB - Virtual size: 1KB

.RES89
Size: 1024B - Virtual size: 791B

.rsrc
Size: 2KB - Virtual size: 2KB