1edee8f1912db6146ad03b6665a7b204

Sharing

Copy URL

Twitter E-mail

General

Target

1edee8f1912db6146ad03b6665a7b204
Size

124KB
MD5

1edee8f1912db6146ad03b6665a7b204
SHA1

e8eb2de2e2a9c4f79e90c24e49fccc36a8a61612
SHA256

dd5f2dec7ffd5635b7511d1014d8ba1cd98d94c505525d3a2c95be279216bc1d
SHA512

051cb1896678bf236996e5b1e1581c27fa387d49d0d74b3a4f5eceb0096330e06bd41e9f8046a33e13454f3aa9a95066cf68cbfdd9798a43f6a41b6487794ecf
SSDEEP

1536:6gS6FTc6fQo2RJ5NfyTKN9xhnsboyswhLVjsj:+wf0JXVvsbotwDAj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1edee8f1912db6146ad03b6665a7b204

Files

1edee8f1912db6146ad03b6665a7b204
.exe windows:4 windows x86 arch:x86

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
CloseHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalDeleteAtom
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
GlobalFindAtomA
lstrcmpA
GlobalFlags
GlobalFree
GlobalAddAtomA
GlobalHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GlobalUnlock
LocalAlloc
lstrcpynA
InterlockedDecrement
LocalFree
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapAlloc
LCMapStringA
MultiByteToWideChar
HeapFree
WriteFile
RtlUnwind
HeapDestroy
VirtualFree
HeapCreate
TlsGetValue
GetLastError
TlsAlloc
SetLastError
GetFileType
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStdHandle
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
TerminateProcess
GetVersionExA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
Sleep
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
SetStdHandle

user32

LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
GetClientRect
GetPropA
GetSysColor
MapWindowPoints
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
MessageBoxA
EnableWindow
UnhookWindowsHookEx
LoadStringA
FindWindowExA
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetDesktopWindow
GetWindow
GetClassNameA
PostMessageA
CallWindowProcA
RemovePropA
CopyRect
GetTopWindow
CreateWindowExA
GetClassLongA
GetMessageTime
SetPropA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

ord17

gdi32

Escape
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
OffsetViewportOrgEx
ExtTextOutA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

gdi32

winspool.drv

Sections

.text Size: 44KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 60KB - Virtual size: 60KB

.text
Size: 44KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 60KB - Virtual size: 60KB