076b1b6d86abd930fb7e8fd0eabc5ffb

General

Target

076b1b6d86abd930fb7e8fd0eabc5ffb
Size

52KB
MD5

076b1b6d86abd930fb7e8fd0eabc5ffb
SHA1

9d46dc1b02e1fe553c07dc06f1779162660809ff
SHA256

e323e3356717d32e792289b00d98a44046284e1af92c351b50695c889c3fde9d
SHA512

5a19853114eb55d13fa98c655f50158def52f8abcad63cf0ccc98e7347a86822329bcacc7ff0377478f990261b28cbea17e95b2fa4d14e298d6aebc5ad79c480
SSDEEP

768:uoSZDUfcvY5SlVzJPpoLI4+K7Oe3xkQAHpHF8EkkDnlhYmcyL53Qm:6o0v8wzkbuHhmEdrHY+3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076b1b6d86abd930fb7e8fd0eabc5ffb

Files

076b1b6d86abd930fb7e8fd0eabc5ffb
.exe windows:4 windows x86 arch:x86

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

MCIWndCreateA
ICGetDisplayFormat
ICDraw
ICCompressorChoose

ole32

CoCreateInstance
CoGetClassObject
ReadClassStg
OleUninitialize
OleInitialize
CoUninitialize
CoRevokeClassObject
CoInitialize

kernel32

ExitProcess
GetStartupInfoA
lstrcatA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
CloseHandle
InitializeCriticalSection

advapi32

LsaICLookupSids
LsaCreateAccount
LsaCreateTrustedDomainEx
LsaCreateTrustedDomain

user32

ActivateKeyboardLayout
CreateDesktopW
RegisterClassA
SetFocus
ShowWindow
MessageBoxA

msvbvm60

__vbaErrorOverflow
__vbaExitEachAry
__vbaErase
__vbaCyErrVar
__vbaChkstk
__vbaFailedFriend
__vbaAryVar
__vbaFileClose
__vbaBoolStr
__vbaEraseKeepData

wininet

InternetCloseHandle
FindNextUrlCacheGroup
InternetCrackUrlA

dsound

DirectSoundCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate
DirectSoundCaptureCreate8

Sections

.text
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12541812aef338d3c1de6ff3fc73b291

Headers

File Characteristics

Imports

msvfw32

ole32

kernel32

advapi32

user32

msvbvm60

wininet

dsound

Sections

.text Size: 15KB - Virtual size: 16KB

.rdata Size: 11KB - Virtual size: 12KB

.data Size: 14KB - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 15KB - Virtual size: 16KB

.rdata
Size: 11KB - Virtual size: 12KB

.data
Size: 14KB - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB