1a6e35289b04b304be007cf36c0e0bca

Sharing

Copy URL Twitter E-mail

General

Target

1a6e35289b04b304be007cf36c0e0bca
Size

13KB
MD5

1a6e35289b04b304be007cf36c0e0bca
SHA1

9d9c6210825e20372ed88a35a3c6709546b2b0e0
SHA256

ea1551a1bf7f67ec8784e8b390eda43f98be4ceef98ee373e6bc355e902f6e05
SHA512

1a4e364ee9ff6e5466ce3f6c76f9acd31eb47b9cd1981d88fe5c9a09df557a85ba4d04b7a4c5a641b10dbeaca08b2466588466e57fff8f9e5a783605ce039687
SSDEEP

192:VQAgDU7hk3Oh51zagh2uyqq8DPqP4IMDfSYpjQqyAz8NSNIzMR6AkqDR4tzhMCKM:FgOUa51zagQuyqqB4BD6tW6lhK8lKLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6e35289b04b304be007cf36c0e0bca

Files

1a6e35289b04b304be007cf36c0e0bca
.exe windows:4 windows x86 arch:x86

ce0a8a52e1a00bc29712b9433956e854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
GetModuleFileNameA
Sleep
GetCurrentProcessId
GetTempPathA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

user32

GetKeyState
GetWindowTextA
GetWindowTextLengthW
GetForegroundWindow
GetAsyncKeyState

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW

msvcp80

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr80

??2@YAPAXI@Z
_amsg_exit
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
??3@YAXPAX@Z
fclose
_strtime
fprintf
__wgetmainargs
__CxxFrameHandler3
fopen
memset

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce0a8a52e1a00bc29712b9433956e854

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcp80

msvcr80

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 512B - Virtual size: 428B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 428B