6a0fbd70463ecb3e2769f3339d76cd0e

Sharing

Copy URL Twitter E-mail

General

Target

6a0fbd70463ecb3e2769f3339d76cd0e
Size

291KB
MD5

6a0fbd70463ecb3e2769f3339d76cd0e
SHA1

a1334d83f00321c56fce161af1659407ade42386
SHA256

cf25f95bd9fd453d85b68dbf65374b1566d7bc8af3195ed921f3948d4514fe67
SHA512

fc96f6286e5103669054af5393b88fd6b5010065e8664a762030ed6ecfe9377aefb237deab1a71fdf7c90ff7d19bb24ffb27ee4c34e6eccbb4fd77c988e96187
SSDEEP

6144:GA1wTB+aXRAiNsZDXdBqEc4gga0NeYhNuOncD6v5xIQrS31:ql+aBANZDXdBm4VakuOcD6hxIR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0fbd70463ecb3e2769f3339d76cd0e

Files

6a0fbd70463ecb3e2769f3339d76cd0e
.dll windows:4 windows x86 arch:x86

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
LoadLibraryA
GetCommandLineA
GetModuleHandleA
lstrlenW
ExitThread
GetProcAddress
lstrlenA
IsBadReadPtr
ExitProcess
GetVersionExA
VirtualAlloc
GlobalAlloc

gdi32

GetPaletteEntries
GetObjectA
CreateBitmap
GetBitmapBits
GetCurrentPositionEx
GetPixel
GetDIBits
SelectObject
GetDCOrgEx

comctl32

ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_Remove

user32

GetWindowLongA
RegisterWindowMessageA
MessageBoxA
GetDlgItem
GetMenu
MsgWaitForMultipleObjects
SetWindowsHookExA
EnableWindow
GetLastActivePopup
IsChild
RedrawWindow
DispatchMessageA
EmptyClipboard
CallWindowProcA
GetCapture
IsZoomed
CharNextA
IsDialogMessageW
RegisterClipboardFormatA
IsDialogMessageA
ShowScrollBar
DrawIcon
GetDesktopWindow
DrawIconEx
GetForegroundWindow
OemToCharA
ShowOwnedPopups
DefFrameProcA
InvalidateRect
ClientToScreen
GetCursorPos
GetSysColor
GetSysColorBrush
GetDC
GetTopWindow
SetRect
PeekMessageW
BeginPaint
CloseClipboard
GetSystemMetrics
CreateWindowExA
GetMenuState
GetMenuItemInfoA
ReleaseDC
SetWindowLongA
RemoveMenu
IsWindowEnabled
GetWindowDC
GetWindowThreadProcessId
GetKeyboardState
SetMenu
GetWindowPlacement
ShowWindow
EnableMenuItem
CharLowerBuffA
GetMenuStringA
SetParent
DefWindowProcA
IsWindowUnicode
InsertMenuItemA
RemovePropA
GetCursor
CheckMenuItem
OpenClipboard
WaitMessage
SetClipboardData
CharUpperBuffA
DrawAnimatedRects
GetKeyState
GetScrollPos
GetKeyNameTextA
GetClassInfoA

version

GetFileVersionInfoA
VerQueryValueA

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc0
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b1b6a6c6abe13797b66007cb4f5d8e3

Headers

File Characteristics

Imports

kernel32

gdi32

comctl32

user32

version

Sections

CODE Size: 99KB - Virtual size: 98KB

DATA Size: 179KB - Virtual size: 179KB

.rsrc5 Size: 1024B - Virtual size: 686B

.rsrc9 Size: 1KB - Virtual size: 101KB

.rsrc0 Size: 2KB - Virtual size: 1KB

.rsrc4 Size: 3KB - Virtual size: 2KB

.rsrc1 Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 988B

.reloc Size: 1024B - Virtual size: 592B

CODE
Size: 99KB - Virtual size: 98KB

DATA
Size: 179KB - Virtual size: 179KB

.rsrc5
Size: 1024B - Virtual size: 686B

.rsrc9
Size: 1KB - Virtual size: 101KB

.rsrc0
Size: 2KB - Virtual size: 1KB

.rsrc4
Size: 3KB - Virtual size: 2KB

.rsrc1
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 988B

.reloc
Size: 1024B - Virtual size: 592B