fb7100d84565e27ca15215c4a8904c95

General

Target

fb7100d84565e27ca15215c4a8904c95
Size

97KB
MD5

fb7100d84565e27ca15215c4a8904c95
SHA1

fdf4690a59290edf5ed44608ccdf234af654a32e
SHA256

8f7779cce2a4351cb39a9aee7eb2301509099b2d8b01ef825f04375ed5b7d1d7
SHA512

f50ad9c2671cc64ec5d42aa975eb95d3a2e7235e8e08d932efd726e4f40edaf2b58b9f5b93de89bedb842d015ea49abdafccc68102fefcd1979ac855ede47845
SSDEEP

1536:51IjsLmIDpsg34biwAz90VbNj7tdAzXof1tqkzOO5cSi4iXHifKvtot6:5ajsbSgKAz9CdAzXE1YXPOKvtot6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb7100d84565e27ca15215c4a8904c95

Files

fb7100d84565e27ca15215c4a8904c95
.exe windows:5 windows x86 arch:x86

6d20643210585460c48340f02dc73568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA

advapi32

RegQueryValueExW
InitializeAcl
RegDeleteValueA
RegEnumKeyExW
AllocateAndInitializeSid
RegDeleteKeyA
RegEnumKeyExA
FreeSid
RegSetValueExA
LookupPrivilegeValueA
RegDeleteValueW

gdi32

PlayMetaFileRecord
CreateDCW
UnrealizeObject
StretchBlt
PolyBezierTo
CreatePen
SetRectRgn
LPtoDP
RealizePalette
GetStockObject
BitBlt
TextOutA
GetCurrentPositionEx
GetTextAlign
AngleArc
CreatePalette

comctl32

ImageList_AddMasked
InitCommonControlsEx
InitCommonControls
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

msvcrt

_lock
_wtol
_mbsicmp
?terminate@@YAXXZ
fputc
_open_osfhandle
_wcsicmp
memcpy
??2@YAPAXI@Z
realloc
__p___initenv
__setusermatherr
_adjust_fdiv
bsearch
_strcmpi
_XcptFilter
wcstol
iswctype

kernel32

SetThreadPriority
GetTempFileNameA
GlobalUnlock
LocalAlloc
DeleteCriticalSection
ExitProcess
GetLastError
VirtualAlloc
CloseHandle

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d20643210585460c48340f02dc73568

Headers

File Characteristics

Imports

version

advapi32

gdi32

comctl32

msvcrt

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 86KB

.idata Size: 10KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 86KB

.idata
Size: 10KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 19KB