695fb06da4e40ec5b620a7e90ce5ec94

Sharing

Copy URL Twitter E-mail

General

Target

695fb06da4e40ec5b620a7e90ce5ec94
Size

120KB
MD5

695fb06da4e40ec5b620a7e90ce5ec94
SHA1

cb776331e47a6c003acbb25bf504c9e29fda1dff
SHA256

e564e19ffcc3485c01ca29d07717d256449e158979caf0afba97e532bd7f1f05
SHA512

100f4690a7d6c908f01053a484c1d2b7c52fd9991940cddea1b0d5a2ece9bc95c57cc993e2d1db5b6fa731d4b70a2494043491625c582d6fad73ee971c8bfcc0
SSDEEP

3072:ipPZUfGzWoEVDiQPhRfJwlIeW9bisMPQc:ipBSPhFJpTi3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695fb06da4e40ec5b620a7e90ce5ec94

Files

695fb06da4e40ec5b620a7e90ce5ec94
.exe windows:4 windows x86 arch:x86

f34a603265c425f6e6fdd0b080957065

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

gdi32

BitBlt
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
ExtCreatePen
GetObjectA
GetPixel
GetStockObject
LineTo
MoveToEx
PolyBezier
SelectObject
SetBkColor
SetBkMode
SetTextAlign
SetTextColor
TextOutA

shell32

ShellExecuteA
Shell_NotifyIconA

user32

UnregisterClassA
TranslateMessage
TranslateAcceleratorA
ShowWindow
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetForegroundWindow
SetCapture
SendMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExA
RegisterClassA
RedrawWindow
PtInRect
PostQuitMessage
PostMessageA
MoveWindow
MessageBoxA
LoadStringA
UpdateWindow
LoadCursorA
LoadBitmapA
LoadAcceleratorsA
KillTimer
IsWindowVisible
IsIconic
InvalidateRect
GetWindowRect
GetWindowLongA
GetSystemMetrics
GetParent
GetMessageA
GetMenu
GetForegroundWindow
GetFocus
GetDlgItem
GetDC
GetClientRect
FillRect
EndPaint
EndDialog
DrawTextA
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CheckMenuItem
BeginPaint
LoadIconA
wsprintfA
SetFocus

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

kernel32

lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SetUnhandledExceptionFilter
SetStdHandle
SetHandleCount
SetFilePointer
RtlUnwind
MultiByteToWideChar
LoadLibraryA
LCMapStringA
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GetVersionExA
GetVersion
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetFileType
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentProcess
GetCommandLineA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
DeviceIoControl
CreateThread
CreateFileA
CreateEventA
CloseHandle

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34a603265c425f6e6fdd0b080957065

Headers

File Characteristics

Imports

advapi32

gdi32

shell32

user32

setupapi

kernel32

Sections

.text Size: 76KB - Virtual size: 75KB

.data Size: 32KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 76KB - Virtual size: 75KB

.data
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 3KB