4d93c825d55608ac229474faa85f1dbc

Sharing

Copy URL

Twitter E-mail

General

Target

4d93c825d55608ac229474faa85f1dbc
Size

477KB
MD5

4d93c825d55608ac229474faa85f1dbc
SHA1

bf23ff6fd453a31c310eff070cf5ae36074f5396
SHA256

20e542c0f796c6695f03d33fa033328eb8efd72b43bd8e988c683c48b2a57b6e
SHA512

a77244fdce2c50b17743d8619b1c15bf2450a4eb7e47961c70ace8408431a80caadd3869a8c351962967daa93e9e5cfd034d5527f60235245a8f2ebc7c77c324
SSDEEP

6144:ZeBh3iyM5EjdU6fkmf5jRr5NuDz9EqdvbbJrRXCNjhU037WSb25Culy7oCqARgyv:Zu39eOkodHq9d+1U0rWSB7oCqB56x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d93c825d55608ac229474faa85f1dbc

Files

4d93c825d55608ac229474faa85f1dbc
.exe windows:5 windows x86 arch:x86

647525327d70a180a3f23043580fb67b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetActiveWindow
GetDesktopWindow
LoadBitmapA
FindWindowA
GetFocus
SendInput
LoadStringA

wininet

HttpOpenRequestA

msvfw32

DrawDibDraw
DrawDibOpen
DrawDibClose

winmm

waveInClose
mixerClose
joySetCapture

msacm32

acmDriverEnum
acmFilterEnumW

kernel32

FreeEnvironmentStringsA
SetConsoleMode
ReadConsoleInputA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
ExitProcess
GetComputerNameA
CreateFileA
SignalObjectAndWait
GetTickCount
Sleep
SizeofResource
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
GetLocalTime
LoadLibraryA
CloseHandle
GetSystemTime
ResumeThread
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
ReadFile
HeapFree
RaiseException
HeapAlloc
GetModuleHandleW
WriteFile
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
SetStdHandle
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 371KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stls
Size: 512B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

647525327d70a180a3f23043580fb67b

Headers

DLL Characteristics

File Characteristics

Imports

user32

wininet

msvfw32

winmm

msacm32

kernel32

Sections

.text Size: 65KB - Virtual size: 64KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 371KB - Virtual size: 378KB

.stls Size: 512B - Virtual size: 372KB

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 65KB - Virtual size: 64KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 371KB - Virtual size: 378KB

.stls
Size: 512B - Virtual size: 372KB

.rsrc
Size: 21KB - Virtual size: 21KB