fb2aebd272243700100084eb3d508de6

Sharing

Copy URL Twitter E-mail

General

Target

fb2aebd272243700100084eb3d508de6
Size

186KB
MD5

fb2aebd272243700100084eb3d508de6
SHA1

1b642f1502e4803b4f3f92440dbbbe1f2f8fc54d
SHA256

e6a0fe5ebb7c4261ac9a7b82459119d8a5859d79a940e126e494772931a2e498
SHA512

25811be747ac76e11da860f5decf4f05e19543a304e5603da94f8ab9bea04f680537ee4baa9b43864f55e20e69ffa04e9edd185348656cd5449ce5922282ecfb
SSDEEP

3072:9VuApTFSCrxsfNl6fjGhMKLIpKLSyJhL2UtzKOO91lcpiwg2snLU7ZsJsPytyLq9:9DxACrSNlvMKl+UtzQ19w4LqQgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb2aebd272243700100084eb3d508de6

Files

fb2aebd272243700100084eb3d508de6
.exe windows:4 windows x86 arch:x86

dbc875669f05ecc073f3ab9541e96da5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

kernel32

SetTapePosition
InterlockedExchange
ClearCommError
FindClose
GetLocalTime
GetCurrentProcessId
EnumResourceNamesA
Sleep
GetVersion
FatalExit
GetWindowsDirectoryA
FindFirstFileA

advapi32

RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA

gdi32

GetObjectA
TextOutA
CreateFontIndirectA
CreateCompatibleDC
CreateRectRgn
DeleteDC
DeleteMetaFile
EnumFontFamiliesExA
BitBlt
GetDeviceCaps
Rectangle
SetBkMode
SetTextColor
RestoreDC
CreateSolidBrush
SaveDC
GetStockObject
SelectObject
DeleteObject
GetTextExtentPoint32A
CreateCompatibleBitmap

oleacc

LresultFromObject
CreateStdAccessibleObject

winmm

mciSendCommandA
sndPlaySoundA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

user32

LoadCursorA
GetSysColor
FillRect
GetDC
SetWindowPos
SetCursor
GetWindowInfo
GetDlgItem
GetWindowLongA
MoveWindow
ReleaseDC
SetWindowLongA
IsWindow
ReleaseCapture
SetCapture

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbc875669f05ecc073f3ab9541e96da5

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

gdi32

oleacc

winmm

version

ole32

user32

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 30KB - Virtual size: 30KB

.lib Size: 512B - Virtual size: 360KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 30KB - Virtual size: 30KB

.lib
Size: 512B - Virtual size: 360KB