177b7dc6a327e1bc0c89eaec42c99210

Sharing

Copy URL

Twitter E-mail

General

Target

177b7dc6a327e1bc0c89eaec42c99210
Size

269KB
MD5

177b7dc6a327e1bc0c89eaec42c99210
SHA1

fbd34b585bceca05d49f536d656d3641e1e753ab
SHA256

e278db547acea9f0800f671616c2f45d8770e90c883b2f3c5c85301318d7c259
SHA512

5a7e170ccbd01975ed594ced3729f34ed01e90ed2dc4fa5520eb6229b957823c74360a21de116f16dbfd4a49bd68a26e4fc3d7cb79286ed8b5970d0ecc6f490a
SSDEEP

3072:uwRs3EBKGlDCNR3JxjczH0Kkgtj+d/xs5Lz+0C5MQkKaeMzev8z7b4Zy+JqI:JRWqKKDCNR3JxjW0Kg0C5MQToa8z7bj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
177b7dc6a327e1bc0c89eaec42c99210

Files

177b7dc6a327e1bc0c89eaec42c99210
.exe windows:4 windows x86 arch:x86

b66e724ef8e236e4ecc5b2765a0ccac9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleFileNameA
lstrcpynA
SetFilePointer
SetConsoleCtrlHandler
SetStdHandle
LCMapStringW
LCMapStringA
HeapReAlloc
GetStringTypeA
InterlockedIncrement
GetStringTypeW
InterlockedDecrement
DebugBreak
OutputDebugStringA
HeapAlloc
VirtualAlloc
LoadLibraryA
HeapValidate
IsBadReadPtr
HeapFree
WriteFile
RtlUnwind
IsBadWritePtr
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetLastError
UnhandledExceptionFilter
FlushFileBuffers
GetCurrentProcess
TerminateProcess
GetProcAddress
GetModuleHandleA
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA

user32

GetDC
EndPaint
LoadBitmapA
GetSystemMetrics
ReleaseDC
wsprintfA
MessageBoxA
GetClassNameA
BeginPaint
EnumWindows
TranslateMessage
DestroyIcon
DispatchMessageA
SetWindowTextA
GetDlgItem
DestroyWindow
EndDialog
ShowCursor
UpdateWindow
SetCursor
ShowWindow
PostQuitMessage
KillTimer
SetTimer
TrackPopupMenu
SetForegroundWindow
GetCursorPos
WinHelpA
DestroyMenu
DialogBoxParamA
GetSubMenu
DefWindowProcA
LoadMenuA
CheckMenuItem
SetMenuDefaultItem
EnableMenuItem
LoadCursorA
SendMessageA
LoadIconA
GetMessageA
RegisterClassExA
CreateWindowExA
InvalidateRect
ValidateRect

gdi32

StretchBlt
BitBlt
GdiFlush
GetStockObject
CreateCompatibleBitmap
CreateDCA
GetObjectA
DeleteDC
DeleteObject
CreateCompatibleDC
SelectObject

advapi32

RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

Shell_NotifyIconA

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b66e724ef8e236e4ecc5b2765a0ccac9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 77KB - Virtual size: 77KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 17KB - Virtual size: 24KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 159KB - Virtual size: 159KB

.reloc Size: 5KB - Virtual size: 8KB

.text
Size: 77KB - Virtual size: 77KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 17KB - Virtual size: 24KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 159KB - Virtual size: 159KB

.reloc
Size: 5KB - Virtual size: 8KB