1ded2192bc05f3e37c94c452f6bd5cef

Sharing

Copy URL Twitter E-mail

General

Target

1ded2192bc05f3e37c94c452f6bd5cef
Size

95KB
MD5

1ded2192bc05f3e37c94c452f6bd5cef
SHA1

02b63687ed8b8250f0ccaea1cf034995a090e635
SHA256

bb8a3ca0bc75ee940a1ab43f52c6c4d24e241b26f4ee1ccd9aa7973fd7f2aace
SHA512

0d513c327d799aa71417482f64539c7975b1831b520e566077980abe436de5ca0ffce59719578f4ce2020dd2e4f9a96529c71b65b10b3e677346a7a6d9b40ce2
SSDEEP

1536:YwptYLfAKYi57nqNwEoC1p3a2pm5srag04It81Y47GdWyPz4mV:1pKc457goypDmGrzNBYVAyPsk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ded2192bc05f3e37c94c452f6bd5cef

Files

1ded2192bc05f3e37c94c452f6bd5cef
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

7e588145af531950269187a13a428ab8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
SHGetDesktopFolder

gdi32

RestoreDC
GetBkMode

kernel32

LoadLibraryA
MoveFileA
lstrlenA
VirtualAllocEx
lstrcatA
GetACP
SetEvent
GlobalFindAtomA
SetErrorMode
SetFilePointer
SetThreadLocale
ReadFile
GetModuleHandleA
InitializeCriticalSection
lstrcmpA
HeapDestroy
IsBadHugeReadPtr
FreeResource
VirtualAlloc
DeleteFileA
LoadResource
lstrcmpiA
ExitProcess
RaiseException

user32

DispatchMessageW
IsWindowEnabled
IsZoomed
SetScrollRange
IsWindow
SetWindowTextA
OpenClipboard
SendMessageA
SystemParametersInfoA
InvalidateRect
EqualRect
GetScrollPos
GetMenuItemCount
RegisterClipboardFormatA
DrawIconEx
EnableWindow
SetActiveWindow
GetWindowTextLengthA
MsgWaitForMultipleObjects
GetWindowThreadProcessId
IntersectRect
DrawFrameControl
CharNextW
ShowScrollBar
InsertMenuA
CreateIcon
IsWindowUnicode
GetActiveWindow
SetClassLongA
UnhookWindowsHookEx
AdjustWindowRectEx
SetWindowPlacement
LoadStringA
DestroyCursor
GetCapture
GetKeyState
CharUpperA
IsCharUpperA
RegisterClassA
GetMenu
GetIconInfo
ScreenToClient
IsChild
LoadIconA
ShowOwnedPopups
ScrollWindow
GetScrollRange
TrackPopupMenu
BeginPaint
LoadBitmapA
PeekMessageW
MapVirtualKeyA
CharNextA
CallWindowProcA
GetMenuItemInfoA
GetKeyboardLayoutNameA
KillTimer
IsDialogMessageW
DefFrameProcA
InflateRect
SetCapture
FrameRect
ClientToScreen
MessageBoxA

Exports

Exports

yV0FVh

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e588145af531950269187a13a428ab8

Headers

File Characteristics

Imports

shell32

gdi32

kernel32

user32

Exports

Exports

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 2KB - Virtual size: 1KB

.badata Size: 512B - Virtual size: 462B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 2KB - Virtual size: 1KB

.badata
Size: 512B - Virtual size: 462B

.rsrc
Size: 8KB - Virtual size: 8KB