1065839ee799a83ad73ebe8ad1bf2b11

Sharing

Copy URL

Twitter E-mail

General

Target

1065839ee799a83ad73ebe8ad1bf2b11
Size

190KB
MD5

1065839ee799a83ad73ebe8ad1bf2b11
SHA1

d4ca2d6a7dfbac168f02fa95e496aeab9610ece9
SHA256

75f55952b0366be5ca541c5c35eb88c3aed878c96550ae587c6bdbe3a3a7153c
SHA512

235eee88fa971250dfb95486047ebc5267658d97a181b18954fafa5b31936f659c60b26ed21dad2b63ccc26e0ea8192e9e0fb1dc6085101b845c00193f987af6
SSDEEP

3072:h7nD9XUFAyRoEki80dM7wbrSwAf4HAe3mpEDPlXes+E+cU5lBsrufSN5n:BnDCWyOZ+dJvDw4HAJED9l+H5lBly5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1065839ee799a83ad73ebe8ad1bf2b11

Files

1065839ee799a83ad73ebe8ad1bf2b11
.exe windows:4 windows x86 arch:x86

d4354d0094f939569eab626c3e678d05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryExA
GetStdHandle
RtlMoveMemory
GlobalAlloc
GlobalDeleteAtom
ReadFile
GetVersionExA
VirtualAlloc
GetOEMCP
GetLastError
VirtualAllocEx
Sleep
GetCommandLineA
LocalAlloc

user32

IsWindowEnabled
GetActiveWindow
IsChild
GetCursor
MessageBoxA

gdi32

SelectObject
CreateBitmap
BitBlt
CopyEnhMetaFileA
CreatePenIndirect
RestoreDC
SetPixel
GetPaletteEntries
CreateDIBitmap

ole32

CoGetMalloc
CoFreeUnusedLibraries
OleRun
CoRevokeClassObject

Sections

CODE
Size: 53KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4354d0094f939569eab626c3e678d05

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

CODE Size: 53KB - Virtual size: 56KB

.data Size: 76KB - Virtual size: 80KB

.tls Size: 3KB - Virtual size: 4KB

.edata Size: 46KB - Virtual size: 48KB

DATA Size: 512B - Virtual size: 4KB

INIT Size: 512B - Virtual size: 4KB

.text Size: 512B - Virtual size: 4KB

.rdata Size: 1024B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

CODE
Size: 53KB - Virtual size: 56KB

.data
Size: 76KB - Virtual size: 80KB

.tls
Size: 3KB - Virtual size: 4KB

.edata
Size: 46KB - Virtual size: 48KB

DATA
Size: 512B - Virtual size: 4KB

INIT
Size: 512B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 1024B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB