1f67115a2e07c6b9492167cd5a5e9378

Sharing

Copy URL Twitter E-mail

General

Target

1f67115a2e07c6b9492167cd5a5e9378
Size

82KB
MD5

1f67115a2e07c6b9492167cd5a5e9378
SHA1

a169c8de275274d747337219ae12da450f061f41
SHA256

e195c0b8b56d4e50c2b1caa74bd8e0a543df48f7a2aa7cd906a9478aa6c317c3
SHA512

a0060a6ddd42f5dda1cd24461c10dfef0923b542d61ffd12e9f6eaf5b6facf057ca300e4bddc18961cdc3ec3f31327e85b3c9bf6dce52ff61c65fe1da88f3481
SSDEEP

1536:dfY4qyNlZPV5EGIHrjXgFWMgM7p/PAq/zvN0RsXpyxpq8G8/8:dfeyPlPkrbKD7p/PdSWh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f67115a2e07c6b9492167cd5a5e9378

Files

1f67115a2e07c6b9492167cd5a5e9378
.exe windows:5 windows x86 arch:x86

0bec5881e960cc4bde4f40a47711e615

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_write
_loaddll
__CxxUnregisterExceptionObject
_mbsnset
vwprintf
wcsftime
_stat
frexp
freopen
tan
isspace
_putenv
gmtime
_execvp
sinh

wininet

GopherCreateLocatorW
InternetGetCookieExA
HttpOpenRequestA
CreateUrlCacheGroup
GetUrlCacheEntryInfoW
FindNextUrlCacheContainerA
DeleteUrlCacheContainerW
InternetGetCertByURLA
GetUrlCacheConfigInfoW
InternetEnumPerSiteCookieDecisionA
InternetShowSecurityInfoByURLW
FindNextUrlCacheEntryA
FtpPutFileEx
FtpPutFileA
InternetSetDialStateA
FtpGetCurrentDirectoryA

resutils

ResUtilGetDwordValue
ResUtilResourceTypesEqual
ResUtilGetEnvironmentWithNetName
ResUtilGetBinaryProperty
ResUtilSetResourceServiceEnvironment
ResUtilGetResourceName
ResUtilSetPropertyParameterBlockEx
ResUtilGetResourceNameDependency
ResUtilEnumResources
ResUtilTerminateServiceProcessFromResDll
ResUtilIsResourceClassEqual
ResUtilGetPropertySize
ResUtilCreateDirectoryTree

kernel32

GetUserGeoID
LoadLibraryA
GetProcessWorkingSetSize
GetLastError
GetConsoleNlsMode
FreeUserPhysicalPages
VirtualAlloc
GetShortPathNameW
GetThreadSelectorEntry
NlsGetCacheUpdateCount
CloseConsoleHandle
FindFirstVolumeMountPointA
GetConsoleFontInfo
ExpungeConsoleCommandHistoryA
CreateMailslotW
SetVolumeLabelW
GetCommandLineW
EnumResourceTypesA
GetExitCodeThread
RestoreLastError
TryEnterCriticalSection

user32

TileChildWindows
LoadCursorA
WINNLSGetIMEHotkey
ModifyMenuW
FindWindowExW
AppendMenuW
DlgDirSelectExW
GetAppCompatFlags2
EqualRect
RemovePropW
DefFrameProcA
GetWindow
ToUnicode
EndDialog
SetClipboardViewer

utildll

RegGetNetworkDeviceName
ParseDecoratedAsyncDeviceName
GetSystemMessageW
FormDecoratedAsyncDeviceName
ConfigureModem
StrSystemWaitReason
WinEnumerateDevices
StandardErrorMessage
SetupAsyncCdConfig
GetUnknownString
CalculateDiffTime
StrAsyncConnectState
IsPartOfDomain
StrConnectState
InitializeAnonymousUserCompareList

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bec5881e960cc4bde4f40a47711e615

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wininet

resutils

kernel32

user32

utildll

Sections

.text Size: 37KB - Virtual size: 36KB

.data Size: 25KB - Virtual size: 31KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 512B - Virtual size: 252B

.text
Size: 37KB - Virtual size: 36KB

.data
Size: 25KB - Virtual size: 31KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 512B - Virtual size: 252B