1e93fd578bfa7d27a80cc01bd8c81f73

General

Target

1e93fd578bfa7d27a80cc01bd8c81f73
Size

387KB
MD5

1e93fd578bfa7d27a80cc01bd8c81f73
SHA1

93aa4ad91260d3869ad1b7402772af9d60a9ecc4
SHA256

f1bd47ee91e761ee7a57774792ce2a413d19004f420c75f9905c145ba46b2f57
SHA512

f02caa344a2e31fee1df96ad624c71b92008b35a41c782b1638310d59bbe51bbe80d3fa8908fa35cce8d8a1becc30bfe9d4249e1a63ee6b31817957089561129
SSDEEP

6144:9XKfK/r/F8YgDneBbJu1BMnz6O9wexqEM+2pMhXL30hJQWWZVdqiluVt:9XKfQ8YgDeB9WKnzxqy2LpcoJQdZVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e93fd578bfa7d27a80cc01bd8c81f73

Files

1e93fd578bfa7d27a80cc01bd8c81f73
.exe windows:4 windows x86 arch:x86

ff088890f66eeffc5a08ca76c7c12045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
GetModuleFileNameA
HeapReAlloc
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcess
HeapAlloc
LoadLibraryA
GetVolumeInformationW
ExitProcess
VirtualAlloc
TerminateProcess
GetProfileStringW
GetSystemTimeAsFileTime
InterlockedExchange
GetTickCount
GetCurrentProcessId
GetModuleHandleA
HeapFree
GetProcAddress
RtlUnwind

gdi32

SetPaletteEntries
GetTextExtentPointW
StartPage
SetTextCharacterExtra
EnumObjects
CreateICA
FloodFill
GetColorAdjustment
GetEnhMetaFileDescriptionW
SetICMProfileA
GetTextFaceA
ExtTextOutA
GetColorSpace
GetPixel
FrameRgn
EnumFontFamiliesExW
PolylineTo

advapi32

RegSetValueW
LookupAccountSidA
RegEnumKeyA
LookupAccountNameW
CryptDecrypt
RegFlushKey

user32

ArrangeIconicWindows
TabbedTextOutW
GetUserObjectInformationW
DrawEdge
EnumPropsA
SetClassLongW
ChildWindowFromPoint
RemovePropW
GetMenuState
CopyImage
BlockInput
ReleaseCapture
IsWindowVisible
GetClipboardSequenceNumber
LoadImageA
DdeUnaccessData
EnumPropsExW
GetClipboardFormatNameW
SwitchDesktop
GetWindowModuleFileNameA
MessageBoxIndirectA
SetWindowLongW
UnhookWindowsHookEx
TabbedTextOutA
GetUpdateRgn

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff088890f66eeffc5a08ca76c7c12045

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.text Size: 119KB - Virtual size: 118KB

.data Size: 264KB - Virtual size: 263KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 119KB - Virtual size: 118KB

.data
Size: 264KB - Virtual size: 263KB

.rsrc
Size: 3KB - Virtual size: 3KB