2c5ec29c15c5d785e05f912fac936c91

Sharing

Copy URL Twitter E-mail

General

Target

2c5ec29c15c5d785e05f912fac936c91
Size

138KB
MD5

2c5ec29c15c5d785e05f912fac936c91
SHA1

be690cbb60d8f6a55364d7738b0636b7c2a16ac3
SHA256

6e9d2406eedc9a567e88ffdb59d6536d2cccdb8f06b6e8cd78c651a36cd40ac8
SHA512

3609d6925f82f8e5e68dbb2f47a89ec083e0af7d033ca3a0138fed3d7e064aa2d280da78ce13cdd7179a5c994423e5e608b0e90d4f8ef515cb96da4510e5d2f2
SSDEEP

3072:yGgGnb3lR5yt2ZCS6xA4aYgeFQMRSU05oKyZY1ljMmCQ1R2+n/y4b:zbCS6xAaEfjMmCQTn64b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5ec29c15c5d785e05f912fac936c91

Files

2c5ec29c15c5d785e05f912fac936c91
.exe windows:4 windows x86 arch:x86

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
WriteFile
GetDiskFreeSpaceA
WritePrivateProfileStringA
FindClose
FindFirstFileA
IsDBCSLeadByte
SetFilePointer
ReadFile
GetPrivateProfileIntA
GetLastError
GetTickCount
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
FindResourceA
GlobalHandle
GetUserDefaultLCID
LoadLibraryA
GetProfileStringA
SetErrorMode
GetFileSize
FreeLibrary
CreateFileA
GlobalLock
GlobalAlloc
CloseHandle
GlobalFree
_hread
GlobalUnlock
CreateDirectoryA
lstrlenA
lstrcpyA
WinExec
GetDriveTypeA
SetStdHandle
VirtualAlloc
LCMapStringW
GetProcAddress
HeapFree
HeapAlloc
LCMapStringA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
RtlUnwind
GetStringTypeW
HeapCreate
HeapReAlloc
VirtualFree
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
HeapDestroy
ExitProcess

user32

DestroyWindow
EndDialog
DrawIcon
GetWindowPlacement
GetDlgItem
DialogBoxParamA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
LoadIconA
SetWindowTextA
InflateRect
SendMessageA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterClassA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
DrawTextA
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetSystemMetrics
CharNextA
GetParent
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
SetRect
MoveWindow
GetSysColor
PostQuitMessage
CreateWindowExA

gdi32

RestoreDC
SelectObject
DeleteObject
GetObjectA
SaveDC
CreateFontIndirectA
MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
ExtTextOutA
CreateSolidBrush
CreateDIBitmap
GetTextMetricsA
SelectPalette
GetDeviceCaps
RealizePalette
GetSystemPaletteEntries
UnrealizeObject
CreatePalette
BitBlt
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetStockObject
SelectClipRgn
GetTextExtentPointA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 21KB

.rsrc Size: 3KB - Virtual size: 3KB

.prdata Size: 68KB - Virtual size: 68KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 21KB

.rsrc
Size: 3KB - Virtual size: 3KB

.prdata
Size: 68KB - Virtual size: 68KB