fcbf6460a93b0612b703f2c29b1e2e02

Sharing

Copy URL Twitter E-mail

General

Target

fcbf6460a93b0612b703f2c29b1e2e02
Size

254KB
MD5

fcbf6460a93b0612b703f2c29b1e2e02
SHA1

aaf5756460ba27504bf21e9237d514cdef96726c
SHA256

3c00bfe3c75372e4feedd0d2a45461b90e86716cc76bb6ac986ffc4a218e4266
SHA512

48b5d7747ec9d67c2703c8de6e3d15be4e28d006a52ba83786ba616ceb9ca530eecfaa82cc0a51a2d40e9d3aabf03a7db58a01cab37eceb4b34408716a9132db
SSDEEP

3072:8/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:awVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcbf6460a93b0612b703f2c29b1e2e02

Files

fcbf6460a93b0612b703f2c29b1e2e02
.exe windows:4 windows x86 arch:x86

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject

kernel32

LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx

ole32

CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VarUI4FromStr

user32

CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW

esent

JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese

wmpshell

DllRegisterServer
DllCanUnloadNow

Sections

.YolX
Size: 1KB - Virtual size: 27KB

IMAGE_SCN_MEM_READ

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UrnGiP
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.awBQJUL
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.slUCrgA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GdUqi
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fvTRZ
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mHTN
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.GjQNcMz
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ZJhdvo
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sIVhg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6ad2f82b8ad02523c94a5d495b2dab38

Headers

File Characteristics

Imports

gdi32

kernel32

ole32

oleaut32

user32

esent

wmpshell

Sections

.YolX Size: 1KB - Virtual size: 27KB

.text Size: 17KB - Virtual size: 17KB

.UrnGiP Size: 1KB - Virtual size: 1KB

.awBQJUL Size: 2KB - Virtual size: 1KB

.slUCrgA Size: 2KB - Virtual size: 1KB

.data Size: 7KB - Virtual size: 61KB

.GdUqi Size: 2KB - Virtual size: 2KB

.rdata Size: 208KB - Virtual size: 207KB

.fvTRZ Size: 1024B - Virtual size: 790B

.mHTN Size: 512B - Virtual size: 396B

.rsrc Size: 5KB - Virtual size: 4KB

.GjQNcMz Size: 512B - Virtual size: 266B

.ZJhdvo Size: 1KB - Virtual size: 1KB

.sIVhg Size: 2KB - Virtual size: 2KB

.YolX
Size: 1KB - Virtual size: 27KB

.text
Size: 17KB - Virtual size: 17KB

.UrnGiP
Size: 1KB - Virtual size: 1KB

.awBQJUL
Size: 2KB - Virtual size: 1KB

.slUCrgA
Size: 2KB - Virtual size: 1KB

.data
Size: 7KB - Virtual size: 61KB

.GdUqi
Size: 2KB - Virtual size: 2KB

.rdata
Size: 208KB - Virtual size: 207KB

.fvTRZ
Size: 1024B - Virtual size: 790B

.mHTN
Size: 512B - Virtual size: 396B

.rsrc
Size: 5KB - Virtual size: 4KB

.GjQNcMz
Size: 512B - Virtual size: 266B

.ZJhdvo
Size: 1KB - Virtual size: 1KB

.sIVhg
Size: 2KB - Virtual size: 2KB