1e36f2859c8273a7df471be7621f5054

General

Target

1e36f2859c8273a7df471be7621f5054
Size

90KB
MD5

1e36f2859c8273a7df471be7621f5054
SHA1

0569edbb40f7760d30a541098ad692e244c6d62a
SHA256

cc3a8375cc0469fcff595b85dd4e322c78c18d1589e53b16ffff9340e48371b3
SHA512

21fb657b14d034af1255c2ecc480047fb629f297bbf406f34c049237cc2a6f0e0414be073c35ee112c148bde6ba3d95788e23bfba5c566221cdddd0396475b8c
SSDEEP

1536:ytj/0lF4lYkSNckPOCaG4Qk7/51CtkY5ZkzdFqRj3PiqtBcW:ytj/M0SNTPOzQM/rCtk0ZP56q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e36f2859c8273a7df471be7621f5054

Files

1e36f2859c8273a7df471be7621f5054
.exe windows:4 windows x86 arch:x86

658bc63278dfd0af1e7781224df8fa70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetBrushOrgEx
CreateFontIndirectA
CreateCompatibleDC
ExcludeClipRect
GetCurrentPositionEx
RestoreDC
GetDCOrgEx
CreateSolidBrush
CreateDIBSection
CreateHalftonePalette
CreateDIBitmap
SetTextColor
CreatePalette
DeleteDC
GetBitmapBits
CreateBrushIndirect
DeleteObject
CreateCompatibleBitmap
GetClipBox
CreateBitmap
CreatePenIndirect
GetPixel
GetPixel
ExtTextOutA

kernel32

SetLastError
GetCPInfo
OpenFile
GetLastError
GetFileSize
GlobalFree
DeleteFileA
FindAtomA
ExitThread
ReadConsoleA
DeleteAtom
GetComputerNameA
WriteFile
FindFirstFileA
GetStdHandle
GetFileTime
DeleteFileW
OpenFileMappingA
CreateProcessA
GetCommandLineA
Sleep
GetConsoleMode
CreateThread
ReadFile

comctl32

ImageList_Add
ImageList_LoadImageA
MenuHelp
ImageList_GetIconSize
ImageList_GetIcon
ImageList_DrawEx
ImageList_LoadImageW
DrawStatusTextW
CreateUpDownControl
DllGetVersion
ImageList_DragEnter
ImageList_Create
DrawStatusText
ImageList_EndDrag
CreateToolbarEx
ImageList_Draw
CreateStatusWindowW
ImageList_AddIcon
CreateStatusWindow
ImageList_Copy
InitCommonControls
CreateMappedBitmap
ImageList_Destroy
CreateToolbar

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

658bc63278dfd0af1e7781224df8fa70

Headers

File Characteristics

Imports

gdi32

kernel32

comctl32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 50KB - Virtual size: 49KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 6KB

.idata Size: 3KB - Virtual size: 27KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 50KB - Virtual size: 49KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 6KB

.idata
Size: 3KB - Virtual size: 27KB