f9085f8a27acb171910ec3c06d832bfe

General

Target

f9085f8a27acb171910ec3c06d832bfe
Size

176KB
MD5

f9085f8a27acb171910ec3c06d832bfe
SHA1

1096d15b77c945e2c43ecc107b219008500ff4d3
SHA256

52d1f0b16a01addb5bf766cd6177414bda051e7b970532dd29221d6375dbd6f4
SHA512

674808869af4f1c8a570c59638317ee3623d007e72ec41a7f4c2070c52d7bdde1a617205302bf2d7d399048cadd1b829eca04303112fa7dc7ba46074c9dcc1d4
SSDEEP

3072:PbhI63PoNTgeHyV98k/sqKtXyHRD4tYYJjU6eNrhcaFR/oPqNOVEP:jhhfGseSv/EXkRDUv1U6erxXcVEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9085f8a27acb171910ec3c06d832bfe

Files

f9085f8a27acb171910ec3c06d832bfe
.exe windows:4 windows x86 arch:x86

d4623e9a532c1abff0d23c1bec5019b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
LCMapStringW
ReadFile
GetStringTypeW
GetStringTypeA
GetProcAddress
LoadLibraryA
GetModuleHandleA
EnumSystemLocalesW
GetAtomNameA
LocalShrink
SetConsoleCursor
LCMapStringA
SetLocaleInfoW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle

user32

CreateWindowExA
SetPropW
KillTimer
VkKeyScanA
RealGetWindowClassA

gdi32

CreateBitmapIndirect
EnumObjects
StretchBlt
GetColorAdjustment
DeleteColorSpace
CreateFontIndirectW
PtVisible
SetEnhMetaFileBits

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d4623e9a532c1abff0d23c1bec5019b5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 113KB - Virtual size: 112KB

.data Size: 30KB - Virtual size: 243KB

.rsrc Size: 1024B - Virtual size: 560B

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 113KB - Virtual size: 112KB

.data
Size: 30KB - Virtual size: 243KB

.rsrc
Size: 1024B - Virtual size: 560B