231c13bcf32ef86b78f234c88ac94896

General

Target

231c13bcf32ef86b78f234c88ac94896
Size

108KB
MD5

231c13bcf32ef86b78f234c88ac94896
SHA1

8ad43f3f0badbbb2899fa3144aa5096a7c268076
SHA256

0037b0436d07f48e3741161794a7ed36427db8d5cd40e6af0b964f98ba8304c3
SHA512

4191b0534c67a7096fa82452304a3938f237da20337e74044e76a6cb1f63ebc57ed2580e659286871456a2a9cf33cd9e5d1c2180dbfd33953048685b66811009
SSDEEP

3072:w3+clIF/cCf+IpcZdkjX1NCE2AYoMJlI0:pF0W+IpcoJFYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
231c13bcf32ef86b78f234c88ac94896

Files

231c13bcf32ef86b78f234c88ac94896
.exe windows:4 windows x86 arch:x86

aa02d54beb5eb07b3fe1311a73a92a11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
WriteFile
ReadFile
GetProcAddress
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
CloseHandle
GetFileSize
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
LoadResource
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
TlsAlloc
DeviceIoControl
SetFilePointer
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetStringTypeW

user32

EndPaint
DrawTextA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetSystemMetrics
LoadIconA
RegisterClassExA
EndDialog
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
DialogBoxParamA
DefWindowProcA
FindWindowA
BeginPaint
GetClientRect

gdi32

Rectangle
CreateBitmap

advapi32

RegSetValueExW

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

EGM0-S1
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa02d54beb5eb07b3fe1311a73a92a11

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

Sections

.text Size: 16KB - Virtual size: 12KB

EGM0-S1 Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 12KB

EGM0-S1
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 12KB - Virtual size: 9KB