156de92439cec4dd07a2aa36931d16c8

General

Target

156de92439cec4dd07a2aa36931d16c8
Size

180KB
MD5

156de92439cec4dd07a2aa36931d16c8
SHA1

65985000aa6924a1c553b835ff8ec77314a5b239
SHA256

53a3beb45e927fa5c9731e087aae8f7d3f218f7419bc57c5366ae05ce886021f
SHA512

d0c40ab97683b2d9ef4a91bccf2928ce5117039dcdabe58cf556089ded51eca81efd22268f57e3511cb27351cf7b8e7e645e36a843847fb31d5088f9f3e2256e
SSDEEP

3072:SsEj0O7xi5CnrBWH4LUtjk1RxnxYVuml/DdpENFMSlX3MVBM4KBpoq:WAQxpMH44tjMxYc8hOHM8X8TMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
156de92439cec4dd07a2aa36931d16c8

Files

156de92439cec4dd07a2aa36931d16c8
.exe windows:4 windows x86 arch:x86

bb2c19bcd901df33ec9f7e0461413e58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
LCMapStringW
GetProcAddress
LoadLibraryA
GetLocaleInfoA
GetModuleHandleA
FlushFileBuffers
GetLastError
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
HeapAlloc
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
SetStdHandle
CloseHandle

user32

MapVirtualKeyA
GetSystemMetrics

gdi32

ExtTextOutW
EnumMetaFile
ResizePalette
GetDCPenColor
GetCharWidth32A
DeviceCapabilitiesExA
GetTextExtentPoint32A
CreateDIBitmap
PolyTextOutW
GetEnhMetaFileDescriptionW
PlayEnhMetaFile
GdiEndDocEMF
RoundRect
CreateHatchBrush
GetICMProfileW
GetLogColorSpaceA
SetArcDirection
GetTextExtentExPointA
CreateRectRgn
PolyPolygon
SetWorldTransform
PolyBezier
CopyEnhMetaFileW
SetBrushOrgEx
GetStockObject
PtInRegion
Arc
FillRgn
CreateRectRgnIndirect
SetViewportOrgEx
SetBoundsRect
ExtFloodFill
AddFontResourceExA

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb2c19bcd901df33ec9f7e0461413e58

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 243KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 243KB