00fe6b947b78051643b12c57b7ae75fa

Sharing

Copy URL Twitter E-mail

General

Target

00fe6b947b78051643b12c57b7ae75fa
Size

108KB
MD5

00fe6b947b78051643b12c57b7ae75fa
SHA1

07df68d53384cdedbb5a97b2ba28819257e15bd8
SHA256

ea2f105e8b2f21ce69a9d1521f7ebcfab6dd2447a4417c4453241886c0452683
SHA512

6f3576e98df7812fd92dfc312a7e506497a83299e95343f972460a85bce9cc62e516c875bcc0791f7fc2dac1a0279460750c70343b3065f6986476527b897e60
SSDEEP

1536:AdKWk2RKCqDyi0xY5eTmvw0j0Y6+8rCfe+p8qEMkq804:AAwzi0GZvw9Y6prae+p8XPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00fe6b947b78051643b12c57b7ae75fa

Files

00fe6b947b78051643b12c57b7ae75fa
.exe windows:4 windows x86 arch:x86

d5ea15b5851add8df9dee74197eadf9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA

kernel32

VirtualQuery
GetStdHandle
FindFirstFileA
FindClose
GetSystemDefaultLangID
ExitThread
GetDiskFreeSpaceA
VirtualAllocEx
Sleep
GlobalAlloc
MoveFileExA
SetThreadLocale
VirtualFree
GetModuleHandleA
GetProcAddress

gdi32

SaveDC
CopyEnhMetaFileA
CreatePalette
GetDIBColorTable
GetPixel
BitBlt
GetClipBox
CreateBrushIndirect
SetPixel

user32

SetClipboardData
EnumWindows
GetSubMenu
PeekMessageA
IsRectEmpty
CheckMenuItem
TranslateMDISysAccel
DrawEdge
GetWindowLongW
DefMDIChildProcA
GetClassNameA
IsDialogMessageA
RegisterClipboardFormatA
ScreenToClient
ChildWindowFromPoint
InsertMenuA
FrameRect
IsWindow
GetMenuItemID
wsprintfA
MsgWaitForMultipleObjects
IsWindowVisible
GetWindowTextA
GetKeyboardLayoutList
IsWindowEnabled
EnableScrollBar
WaitMessage
GetSystemMenu
FindWindowA
CreateWindowExA
OpenClipboard
LoadStringA
MessageBeep
GetFocus
GetKeyboardLayout
GetCapture
ScrollWindow
DrawMenuBar
LoadCursorA
SetScrollRange
RegisterWindowMessageA
GetDlgItem
GetMenuItemCount
UnhookWindowsHookEx
GetSystemMetrics
DispatchMessageW
IntersectRect
FillRect
SetWindowsHookExA
DestroyMenu
CreatePopupMenu
CallNextHookEx
InsertMenuItemA
PostQuitMessage
CharNextA
SendMessageW
ShowOwnedPopups
PostMessageA
MapVirtualKeyA
ActivateKeyboardLayout
DefWindowProcA
CloseClipboard
GetScrollInfo
DrawIcon
DefFrameProcA
GetWindowRect
WindowFromPoint
RegisterClassA
GetIconInfo
RedrawWindow
TranslateMessage
MessageBoxA
AdjustWindowRectEx
GetMenuItemInfoA
GetDCEx
SetMenu
GetWindow
ShowWindow
GetSysColorBrush
GetCursor
EnumThreadWindows
DrawFrameControl
EndPaint
OemToCharA
SetClassLongA
GetPropA
DispatchMessageA
GetActiveWindow
GetClipboardData
SetCursor
EnumChildWindows
SetPropA
SetForegroundWindow
GetWindowPlacement
DrawAnimatedRects

shell32

SHGetDesktopFolder
SHFileOperationA
SHGetFileInfoA

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5ea15b5851add8df9dee74197eadf9e

Headers

File Characteristics

Imports

version

kernel32

gdi32

user32

shell32

Sections

CODE Size: 29KB - Virtual size: 29KB

.tls Size: 72KB - Virtual size: 72KB

.data Size: 3KB - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 1KB

CODE
Size: 29KB - Virtual size: 29KB

.tls
Size: 72KB - Virtual size: 72KB

.data
Size: 3KB - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 1KB