1e2ffa24849693cb24c917aa6f2cf343

General

Target

1e2ffa24849693cb24c917aa6f2cf343
Size

43KB
MD5

1e2ffa24849693cb24c917aa6f2cf343
SHA1

c9b327193bdddd28ddc96b989697e68622ce20cd
SHA256

e0033bf580436c1c22584ed0b9ed1da6d6cbd031d1c034ea9f8534c0e1e01879
SHA512

644be8cb6e10ff331770ac20e6c11f4d6613adc04b61950c5c77451ac7482e1bfe379a8d8881b8f5207c18e7cf9116e017f8aa1376e46f77fb5d46a83791e0c4
SSDEEP

768:Fbt4kxRGqE3SOsXE2u8nWO6L4n9K6EGmuu8ZOYrjrr9tTlNSecKV:FESvru8nWx4n9K7G3u8AOr9xlNSecKV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e2ffa24849693cb24c917aa6f2cf343

Files

1e2ffa24849693cb24c917aa6f2cf343
.exe windows:4 windows x86 arch:x86

27dbf786dc5089d65e690af0fea06e3b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputW
SetComputerNameA
GetCommMask
_lcreat
GetConsoleCommandHistoryLengthA
GetConsoleCursorMode
ScrollConsoleScreenBufferW
SetConsolePalette
GetProcAddress
CancelWaitableTimer
ReadProcessMemory
VerLanguageNameA
FindFirstFileExW
CreateFileA
LoadLibraryA
WriteConsoleInputVDMA
EnumLanguageGroupLocalesA
GetProcAddress
VirtualProtect
LockFile
GetFileSizeEx
GetLastError
GetConsoleFontSize
HeapCompact
EnumTimeFormatsW
FormatMessageW
OpenJobObjectA
ExitProcess
LoadLibraryExW
SetProcessAffinityMask
EnumResourceLanguagesW
GetBinaryType
CallNamedPipeW
BackupWrite
GetShortPathNameA

user32

GetLastInputInfo
EqualRect
GetSysColor
IsCharAlphaA
DestroyMenu
DestroyIcon
SetProcessWindowStation
SetLayeredWindowAttributes
RealGetWindowClassA
DestroyCursor
GetMonitorInfoW
EnumDesktopsA
WINNLSGetEnableStatus
GetClipboardOwner
DialogBoxParamW
SetCapture
LoadIconW
GetWindowRect
DrawFocusRect
DdeCreateStringHandleW
WCSToMBEx
SetSysColorsTemp
UnhookWindowsHookEx
CheckMenuItem
GetCursor

gdi32

GdiGetSpoolFileHandle
FlattenPath
SetTextCharacterExtra
WidenPath
GetViewportExtEx
GetColorAdjustment
InvertRgn
GdiAddGlsRecord
GdiConvertRegion
CreateFontA
CreateICW
AddFontResourceExA
SetDCPenColor
AddFontResourceW
SetWorldTransform
GetDeviceCaps

comdlg32

WantArrows
dwOKSubclass
LoadAlterBitmap
PageSetupDlgW
PrintDlgExA
PrintDlgW
ChooseColorW
GetSaveFileNameA
ChooseFontW
FindTextA
ReplaceTextW
GetFileTitleA
GetOpenFileNameA

Sections

.text
Size: 5KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

27dbf786dc5089d65e690af0fea06e3b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 5KB - Virtual size: 44KB

.data Size: 33KB - Virtual size: 36KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 44KB

.data
Size: 33KB - Virtual size: 36KB

.idata
Size: 3KB - Virtual size: 4KB