2e909bf1ad6d0225240ed7047d40ad61

General

Target

2e909bf1ad6d0225240ed7047d40ad61
Size

183KB
MD5

2e909bf1ad6d0225240ed7047d40ad61
SHA1

e4fdf426f5dc226aa18b1373b0d81e30ef4f28e1
SHA256

c2622e1721ead4022a70bc738352fd1e186b78860a0dea9ad300e55d3e94ecbf
SHA512

aff75eb940b210074df4251c139d2dc0b0a1ab960d9208efeecf5c6075009146060e9b8110150e1c7471b0235731994f04974e5018f45c3c147ec296f5b276cd
SSDEEP

3072:3Wq+qH+1j2XpGZLfLariPZnbq+tNR+cEY+muCAxcNEqAHw6E:3Wq+e6jEpwf+rONTYfmu5xcNEo6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e909bf1ad6d0225240ed7047d40ad61

Files

2e909bf1ad6d0225240ed7047d40ad61
.exe windows:4 windows x86 arch:x86

b50b57acbc3ed9d0a3590911a62f3a6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
KillTimer
GetWindowLongW
GetWindowDC
IsZoomed
GetWindowLongA
IsWindowVisible
GetTopWindow
IntersectRect
IsDialogMessageA
InvalidateRect
GetSysColorBrush
IsChild
GetWindow
GetSubMenu
InsertMenuA
InsertMenuItemA
IsIconic
GetSystemMenu
GetWindowPlacement
IsRectEmpty
IsWindow
IsWindowUnicode
InflateRect
IsWindowEnabled
GetSysColor
GetWindowThreadProcessId
IsDialogMessageW
GetWindowTextA
GetScrollRange

kernel32

GetLastError
GetACP
GetModuleHandleA
ExitProcess
VirtualAlloc
IsBadHugeReadPtr
GetCommandLineW
ExitThread
GetCommandLineA
lstrlenA
GetProcAddress
lstrlenW
LoadLibraryExA
GetOEMCP

shlwapi

SHGetValueA
PathGetCharTypeA
PathFileExistsA
SHQueryInfoKeyA
SHEnumValueA
SHDeleteValueA
SHStrDupA
SHDeleteKeyA
SHSetValueA
SHQueryValueExA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b50b57acbc3ed9d0a3590911a62f3a6c

Headers

File Characteristics

Imports

user32

kernel32

shlwapi

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 108KB - Virtual size: 195KB

.adata Size: 2KB - Virtual size: 1KB

DATA Size: 9KB - Virtual size: 8KB

.hdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 836B

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 108KB - Virtual size: 195KB

.adata
Size: 2KB - Virtual size: 1KB

DATA
Size: 9KB - Virtual size: 8KB

.hdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 836B