042454ec650b9b11789e4636cc1237bf

Sharing

Copy URL Twitter E-mail

General

Target

042454ec650b9b11789e4636cc1237bf
Size

121KB
MD5

042454ec650b9b11789e4636cc1237bf
SHA1

84c20ec4324fed850731faebe094fa00b84d6e83
SHA256

34e5d58013d794201552efa531e6c6408babe5960e66176e69effa96f47caae8
SHA512

d779ed7b87570ca06301812d94e6bcc240c2da9b6c559b79566352e86c32649b2cdc48eb98f6f1a3195fdfcbf314eff27dfbe9f84e83540f1d288c98bde69074
SSDEEP

1536:kjdMXWBsKROB6SAqfDLV/I3mVt8WqngfwU1BHd36yezXuRkKHp4xJA73DVNGlMNl:uMXWCWO5V/I3SHHVGckKHp4xmD5NG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
042454ec650b9b11789e4636cc1237bf

Files

042454ec650b9b11789e4636cc1237bf
.exe windows:4 windows x86 arch:x86

b94ebc9c27a22dd405b9e28f5da9e653

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CloseHandle
TerminateThread
GlobalReAlloc
GetProcAddress
HeapFree
GetFileType
CreateDirectoryA
LoadLibraryW
GetProcAddress
SetUnhandledExceptionFilter
GetLastError
CreateNamedPipeA
GetTimeFormatW
FindNextFileW
GetCurrentThreadId
GetSystemInfo
CreateDirectoryW
SetFilePointer
ExitProcess
GetWindowsDirectoryW
LoadLibraryA
GetSystemDirectoryA
QueryPerformanceCounter
IsBadWritePtr
WriteConsoleW
lstrcatA
GetModuleHandleA
GetCurrentThread
OutputDebugStringA
GlobalAlloc

msvcrt

towupper
_acmdln
_wcsnicmp
atoi
strncpy
_iob
wcsncpy
__wgetmainargs
memset
wcsncmp
atoi
isspace
__p__commode
_vsnprintf
memcpy
_wtoi

user32

PostQuitMessage
GetMenuItemCount
GetWindowPlacement
SystemParametersInfoW
DialogBoxParamW
DeleteMenu
GetKeyState
LoadCursorW
GetAsyncKeyState
OpenClipboard
ReleaseDC
LoadAcceleratorsW
LoadStringW
DispatchMessageA
LoadMenuW
RegisterMessagePumpHook
GetDlgItem
MsgWaitForMultipleObjects
RemoveMenu
SetScrollPos
InvalidateRect
SetCapture
ShowWindow

gdi32

CreateSolidBrush
SetTextColor
CreateCompatibleDC
SaveDC
PatBlt
CreateFontIndirectA
SetMapMode
BitBlt
DeleteDC
SelectObject
GetDeviceCaps
SetPixel
SelectPalette
SetBkColor
CreatePen

opengl32

glClearStencil
glTexCoord3fv
glTexCoord2d
glNormal3f
glColor3us
wglCopyContext
glGetTexImage
glRectdv
glCopyTexSubImage1D
glGetPixelMapusv
glColor3f
glColor4i
glInitNames

Exports

Exports

WudAgeb
WweNggrFkgdFjga

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ttvv
Size: 512B - Virtual size: 277B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b94ebc9c27a22dd405b9e28f5da9e653

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.rdata Size: 30KB - Virtual size: 29KB

ttvv Size: 512B - Virtual size: 277B

.data Size: 28KB - Virtual size: 27KB

.rsrc Size: 31KB - Virtual size: 30KB

.reloc Size: 512B - Virtual size: 40B

.text
Size: 30KB - Virtual size: 29KB

.rdata
Size: 30KB - Virtual size: 29KB

ttvv
Size: 512B - Virtual size: 277B

.data
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 31KB - Virtual size: 30KB

.reloc
Size: 512B - Virtual size: 40B