1e12a69b9f7dabe7ed0a81a3ee197d75

General

Target

1e12a69b9f7dabe7ed0a81a3ee197d75
Size

15KB
MD5

1e12a69b9f7dabe7ed0a81a3ee197d75
SHA1

afc37e897d220716887f9ea6dd2170ad335e2d7d
SHA256

87338bd4c03b30a6d22b0e6ff3ae9e66a494f0682bb39d1589a5b8048de70d4e
SHA512

5ab965d78b0ccea32471bb15a3ca6efb19295d3ec0612a3b7ce399497694e1a12b5f939573698f006fbc6631b0206938eea6f0503d33301b56ea11acac732b88
SSDEEP

192:rIvlZC3LwmuGkwt3dnouqNmao9tP30xgg:uQ35ubuouqgTbP35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e12a69b9f7dabe7ed0a81a3ee197d75

Files

1e12a69b9f7dabe7ed0a81a3ee197d75
.dll windows:4 windows x86 arch:x86

01e125adf87f53cb493158cf1b56ee91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
Process32First
CreateToolhelp32Snapshot
ReleaseMutex
GetLastError
CreateMutexA
OpenProcess
GetCurrentProcessId
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
FindClose
FindNextFileA
lstrcpynA
lstrcmpA
FindFirstFileA
VirtualProtectEx
Process32Next
ReadFile
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetSystemDirectoryA
CreateFileA
lstrcpyA
lstrlenA
IsBadStringPtrA
CreateThread
CloseHandle
Sleep

user32

GetForegroundWindow
wsprintfA
GetWindowThreadProcessId
EnumWindows
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetWindowTextA

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA

shlwapi

StrStrIA

msvcrt

strcmp
_purecall
memset
isalnum
strcpy
isprint
strstr
memcpy
memcmp
??3@YAXPAX@Z
??2@YAPAXI@Z

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

Sections

.bss
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01e125adf87f53cb493158cf1b56ee91

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

msvcrt

wininet

Sections

.bss Size: - Virtual size: 2.0MB

.data Size: 6KB - Virtual size: 6KB

.shared Size: 1024B - Virtual size: 532B

.reloc Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 2.0MB

.data
Size: 6KB - Virtual size: 6KB

.shared
Size: 1024B - Virtual size: 532B

.reloc
Size: 6KB - Virtual size: 6KB