18afbc7c69daf02de3447384fcb37227

General

Target

18afbc7c69daf02de3447384fcb37227
Size

168KB
MD5

18afbc7c69daf02de3447384fcb37227
SHA1

2ae85c5537ed3f3b05264c62d52b1c956512b761
SHA256

e6c1f2f93bbe4cfbd6bbd59ee58e93244c636d53303dac0620a0d4d45dffcaa1
SHA512

8544a9ac5e4121058b030c792093efdaed223f47a2c28ba4c843e2a728790582cf33bf9393aa34dcf3a34d7379e5df7e41e7ddf4a364d85d18d461fbd0eb6fb4
SSDEEP

3072:Ix+RoeEt7t8TPWJa+UVU7Vxa6a+MKsZ1lT/TNDm:++Ro/Cx+UVOmNNZTT/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18afbc7c69daf02de3447384fcb37227

Files

18afbc7c69daf02de3447384fcb37227
.exe windows:5 windows x86 arch:x86

8c959097b053c2bc8b3829b20a8a2b34

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetClipBox
RestoreDC
SetTextAlign
GetObjectA
CreateCompatibleDC
GetPixel
PatBlt
DeleteObject
CreatePen
SetTextColor
SaveDC
SetStretchBltMode
SetMapMode
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetDeviceCaps
DeleteDC
SelectObject
RectVisible
CreatePalette
LineTo
GetTextMetricsA
SelectPalette

kernel32

GetCurrentProcess
CopyFileA
GetModuleHandleA
GetCurrentThreadId
GetDriveTypeA
GetProcessHeap
GetCurrentThread
GetVersion
GetStartupInfoA
VirtualAlloc
GetOEMCP
VirtualFree
MulDiv
GetWindowsDirectoryA
GetUserDefaultLangID
GetConsoleOutputCP
GetTickCount
GetCurrentProcessId
RemoveDirectoryA
DeleteFileW
QueryPerformanceCounter
GlobalFindAtomW
lstrcmpiW
DeleteFileA
IsDebuggerPresent
lstrlenA
GetACP
SetCurrentDirectoryA
GetModuleHandleW
lstrcmpiA
lstrlenW
GetCommandLineW
lstrcmpA
GetCommandLineA
GetThreadLocale

user32

GetSystemMetrics
GetDC
GetDesktopWindow
GetParent
CharNextA
TranslateMessage

glu32

gluNurbsCallback

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Jeyyehra
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Bnbge Du
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c959097b053c2bc8b3829b20a8a2b34

Headers

File Characteristics

Imports

gdi32

kernel32

user32

glu32

Sections

.text Size: 11KB - Virtual size: 10KB

Jeyyehra Size: 512B - Virtual size: 4KB

.rdata Size: 27KB - Virtual size: 26KB

Bnbge Du Size: 512B - Virtual size: 4KB

.data Size: 100KB - Virtual size: 100KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 11KB - Virtual size: 10KB

Jeyyehra
Size: 512B - Virtual size: 4KB

.rdata
Size: 27KB - Virtual size: 26KB

Bnbge Du
Size: 512B - Virtual size: 4KB

.data
Size: 100KB - Virtual size: 100KB

.rsrc
Size: 28KB - Virtual size: 27KB