1ea1e51647a6f1548edff4aaa79a9e96

Sharing

Copy URL Twitter E-mail

General

Target

1ea1e51647a6f1548edff4aaa79a9e96
Size

640KB
MD5

1ea1e51647a6f1548edff4aaa79a9e96
SHA1

d24ea7382bb9abfcc3053ead06cd58a45957ac96
SHA256

e38ed48200755fb96cf713311c90b23ee56e5ac9d6cfb7290da08542e7842d58
SHA512

c47c5843ffd26d928e4f8705ae1193e57acf7ccc0866ff0c15a04eba59802657b9b4709afc30a61905f88b0b5c557f7ef7db3c81563fe5f7a521d19484f0c71f
SSDEEP

12288:LNbLK+54o9E39Mkv+Yx6C3odHuwhEznLEOi/DU:Zbyo639wvcwSLBio

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ea1e51647a6f1548edff4aaa79a9e96

Files

1ea1e51647a6f1548edff4aaa79a9e96
.exe windows:4 windows x86 arch:x86

a5cac00b33a73dc958cc34051391a539

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantClear
SysStringLen
VariantInit
SysAllocStringLen
SysAllocString

gdi32

CreateCompatibleDC
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
SetBkColor
BitBlt
CreateSolidBrush
SetTextColor

ole32

CoCreateInstance
CoUninitialize
CoTaskMemFree

kernel32

GetStdHandle
GetOEMCP
VirtualAlloc
FindResourceA
VirtualFree
UnmapViewOfFile
lstrcmpiW
CreateProcessA
SizeofResource
SetStdHandle
GetVersion
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
GetShortPathNameA
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
Sleep
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindNextFileA
CreateFileMappingA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
GetWindowsDirectoryA
GetModuleHandleW
GetFileSize
GetStartupInfoA
DeleteFileA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
CreateEventW
GlobalAlloc
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
GetExitCodeProcess
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
GetCPInfo
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapFree
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP

user32

wsprintfA
InvalidateRect
SystemParametersInfoA
GetSysColor
MessageBoxA
SetDlgItemTextA
SetForegroundWindow
GetDesktopWindow
SendMessageA
LoadIconA
ScreenToClient
GetDlgItem
CheckMenuItem
EndDialog
SetWindowLongA
ReleaseCapture
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
GetClientRect
SetFocus
EndPaint
DispatchMessageA
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
GetActiveWindow
ReleaseDC
GetDC
IsWindow
SetWindowPos
PostQuitMessage
CallWindowProcA
GetFocus
SetCursor
PeekMessageA

advapi32

RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueExW
RegCloseKey
OpenProcessToken

Sections

mkumce
Size: 636KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a5cac00b33a73dc958cc34051391a539

Headers

File Characteristics

Imports

oleaut32

gdi32

ole32

kernel32

user32

advapi32

Sections

mkumce Size: 636KB - Virtual size: 634KB

.bss Size: - Virtual size: 1KB

mkumce
Size: 636KB - Virtual size: 634KB

.bss
Size: - Virtual size: 1KB