1ec244013645bbd13f7dd27b7157b998

Sharing

Copy URL

Twitter E-mail

General

Target

1ec244013645bbd13f7dd27b7157b998
Size

77KB
MD5

1ec244013645bbd13f7dd27b7157b998
SHA1

526a9a2c7a08ca5c81e035c4e76c46a6218fb077
SHA256

cfec2e22717624bbba66cf93550d5eaba601d902b5afabb5a6cec52a9a4c2e44
SHA512

1e77dee04c30f01419a0a06e9b4b7abb4760291ee70c8d5f700a1852dc64769665391be68d264f09294f3209deaf5a21d48a31b65dea21479c748df74059fb72
SSDEEP

1536:sz//JoioC/LaX+8tVx+GQxP3cBFuAQhw8j7KrVp+os7yyLxUwU/XpM:cJoioV3nxny3cqAON7KrVp+os7yKxU7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ec244013645bbd13f7dd27b7157b998

Files

1ec244013645bbd13f7dd27b7157b998
.exe windows:4 windows x86 arch:x86

7d45326e275d9d2b1cd896db6207728e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

lz32

LZCopy
LZOpenFileA
LZClose

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetGetConnectedState

kernel32

IsBadReadPtr
SetUnhandledExceptionFilter
SetStdHandle
GetEnvironmentStringsW
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryA
Sleep
IsBadCodePtr
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
GetEnvironmentStrings
FreeEnvironmentStringsW
CompareStringA
GetCPInfo
CompareStringW
GetACP
GetOEMCP
SetEndOfFile
GetStringTypeA
GetStringTypeW
FormatMessageA
TerminateProcess
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
LCMapStringW
HeapFree
HeapAlloc
RtlUnwind
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
ExitProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
CreateDirectoryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CloseHandle
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
CreateFileA
GetCurrentProcessId
FlushFileBuffers
MultiByteToWideChar
LCMapStringA

user32

GetDC

gdi32

GetDeviceCaps

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

CoCreateGuid

Sections

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 69KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d45326e275d9d2b1cd896db6207728e

Headers

File Characteristics

Imports

version

lz32

wininet

kernel32

user32

gdi32

advapi32

ole32

Sections

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 69KB - Virtual size: 75KB

.rsrc Size: 1024B - Virtual size: 912B

.wtq Size: 1KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 69KB - Virtual size: 75KB

.rsrc
Size: 1024B - Virtual size: 912B

.wtq
Size: 1KB - Virtual size: 4KB