1f92144c44965b12ee8d77fa042b591b

General

Target

1f92144c44965b12ee8d77fa042b591b
Size

18KB
MD5

1f92144c44965b12ee8d77fa042b591b
SHA1

b6ed899c366fc832061064adec39286a7a0e0044
SHA256

789888499718ad2ef32e1c123259bd37180a97d85094841baf2ce76cab0f04fa
SHA512

25b6ee4ac441d47a188526309daee5f6756c18227b446b3361b1e44e2e6292b18320c1b08f31c3368ff8896f4ba1fd43bbd30c183b67a272d690f9ec1f937775
SSDEEP

384:aDhIm+DpwEMIIaMemfyHKrfA1kir2VEjddTddRwH6k7xzjjtNfK4:a2wXIIanmsKM1PjHTHRwH6k7xzjjtFK4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f92144c44965b12ee8d77fa042b591b

Files

1f92144c44965b12ee8d77fa042b591b
.dll windows:4 windows x86 arch:x86

fa6579f0fb35411d2c1af42601c5ec1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
ReadProcessMemory
GetModuleHandleA
SetUnhandledExceptionFilter
ResumeThread
SetThreadContext
SuspendThread
OpenThread
GetModuleFileNameA
GetCurrentThreadId
IsBadReadPtr
WriteProcessMemory
VirtualProtectEx
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InitializeCriticalSection
GetComputerNameA
TerminateThread
CreateThread
Sleep
GetCurrentProcessId
OpenMutexA
GetCurrentProcess
CreateMutexA

user32

FindWindowA
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowTextA
CallNextHookEx
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowsHookExA

msvcrt

_strlwr
free
_initterm
malloc
_adjust_fdiv
_stricmp
strcat
sprintf
strcpy
strncpy
strstr
strcmp
strlen
memcpy
strchr
memset
wcslen
??2@YAPAXI@Z
strrchr

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa6579f0fb35411d2c1af42601c5ec1e

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

wininet

Sections

.text Size: 11KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 2KB

sdt Size: 512B - Virtual size: 80B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 2KB

sdt
Size: 512B - Virtual size: 80B

.reloc
Size: 2KB - Virtual size: 1KB