776ae015aa096720561b039da1e13719

Sharing

Copy URL Twitter E-mail

General

Target

776ae015aa096720561b039da1e13719
Size

116KB
MD5

776ae015aa096720561b039da1e13719
SHA1

1859c6b454bfbe3cdab9f30a864233fd472de157
SHA256

e0694a9edae68fafc362404c40b81487436f50df43b738db71d401722384dc65
SHA512

3a86f98de94c9da464c9803b9c3bffef96a956b4e179627e6f86510763737058bbb756795e899d3f3d73c7ccefc3d3acded21d95cb51ab2d9304403626c0650c
SSDEEP

3072:98RTVXDNJqxSA5HDc3I3nNoOsRXurRUQzj+51/U:SZRcx5VMpOKXur2Qf+51

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
776ae015aa096720561b039da1e13719

Files

776ae015aa096720561b039da1e13719
.exe windows:4 windows x86 arch:x86

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePenIndirect
SelectPalette
CreateDIBSection

version

GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA

kernel32

LoadResource
LoadLibraryExA
LoadLibraryA
lstrlenA
VirtualAllocEx
InitializeCriticalSection

user32

EndDialog
SystemParametersInfoA
GetMenuItemCount
WaitMessage
TranslateMessage
PostQuitMessage
DestroyWindow
DrawEdge
RemovePropA
PeekMessageW
GetClipboardData
SetScrollInfo
EnableWindow
OpenClipboard
GetMenu
CharLowerBuffA
GetClassLongA
SetMenuItemInfoA
MessageBeep
InflateRect
GetWindowRect
ReleaseCapture
IsWindowVisible
DispatchMessageA
DestroyCursor
DrawMenuBar
ChildWindowFromPoint
CharNextW
InvalidateRect
SendMessageA
EnumChildWindows
GetKeyNameTextA
MessageBoxA
AdjustWindowRectEx
PeekMessageA
CharNextA
MsgWaitForMultipleObjects
IsMenu
GetScrollRange
WindowFromPoint
GetWindowThreadProcessId
CreatePopupMenu
UnhookWindowsHookEx
CharLowerA
DestroyMenu
IntersectRect
EnableMenuItem
GetKeyboardState
GetLastActivePopup
IsChild
IsIconic
TrackPopupMenu
SetRect
GetSystemMenu
GetWindowDC
GetKeyState
KillTimer
DefFrameProcA
SetParent
wsprintfA
SetWindowPos
EndPaint
GetKeyboardType
GetTopWindow
GetDC
DefMDIChildProcA
BeginPaint
SetScrollRange
MoveWindow
EnumThreadWindows
GetKeyboardLayoutNameA
SetScrollPos
UpdateWindow
GetParent

Exports

Exports

_D2cvaerX@24
_qGQuDZiY@16
q5obCk3S@16
_18H7KG@24
iUbTehlF1e8n
_nJ5fZj8bYRCkQF
izYHSM
_Uvyn1J4qas
jEflHjHDiP@16
_Jfeg3o1veiT
_YS3QKKguc6Y_Q
X93EFTjfWcdz8E@4
rczvj5o4eHah@16
_EDtMxN@16
_v75fhfNpnwS@4
_o7g7eH@24
WMWtLt7a8V@8
_FQG0bU_Yx27l4@12
Oz4wdVaw@16
7PmZCcu8h
Ts2J_cUhKfajX@4
lo212SxwdC5_@12
_GHMVT21NQ@4
k5SSpg89W94pNC
gizl0l@8
xaGEUtSbTSyJN@8
LXtIWw64h@8

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6a3a898aaad84051a2ac225fe198c37a

Headers

File Characteristics

Imports

gdi32

version

kernel32

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 4KB - Virtual size: 143KB

.data Size: 98KB - Virtual size: 98KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 4KB - Virtual size: 143KB

.data
Size: 98KB - Virtual size: 98KB

.rsrc
Size: 2KB - Virtual size: 1KB