1f4bf0591dd0ec6ec01aaebbe7012c88

Sharing

Copy URL Twitter E-mail

General

Target

1f4bf0591dd0ec6ec01aaebbe7012c88
Size

228KB
MD5

1f4bf0591dd0ec6ec01aaebbe7012c88
SHA1

2720253250744c081eb236720479d24bccb6d445
SHA256

c2652ad39ed0b0040c68b45bded4bc3fbbe3502ab31cc6791fcd3392e3e597de
SHA512

fcfa0509d4cfae55be208a1d9fc6883e8009b39700466c2c6250d4295054bf413dc63485869adaa313df6fdca1630bded18c1e4633d01e32e24181c2d50e35a1
SSDEEP

6144:3VMuMB283I/dcpkEC+NvFMQ8w9aWDgg9iVsv/8iVI:3VMhB2p/COUvCcAqg+i2HC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f4bf0591dd0ec6ec01aaebbe7012c88

Files

1f4bf0591dd0ec6ec01aaebbe7012c88
.exe windows:4 windows x86 arch:x86

e488a399eb4d3cc908858aba8fa41acb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueA
RegOpenKeyA

user32

EnumThreadWindows
EndPaint
EnableWindow
FillRect
DrawIconEx
EqualRect
EmptyClipboard
GetCapture
GetDesktopWindow
GetCursorPos
DrawTextA
GetClipboardData
GetClientRect
GetClassNameA
FrameRect
GetActiveWindow
GetDC
GetDlgItem
GetFocus
GetDCEx
DrawMenuBar
GetClassLongA
EnumChildWindows
EnumWindows
FindWindowA
GetCursor
EnableScrollBar
GetForegroundWindow
EnableMenuItem
GetClassInfoA

gdi32

GetPixel
GetPaletteEntries
CreateFontIndirectA
GetBitmapBits
CopyEnhMetaFileA
GetCurrentPositionEx
CreateBitmap
SelectPalette
SetPixel
RestoreDC
CreateDIBitmap
CreatePalette
CreateCompatibleDC
SetTextColor
GetObjectA
SelectObject
GetDCOrgEx
BitBlt
GetDIBits
CreateDIBSection
CreatePenIndirect
SetBkMode
SetBkColor
LineTo
GetDIBColorTable
CreateCompatibleBitmap
GetClipBox
CreateBrushIndirect
GetRgnBox
SaveDC

version

GetFileVersionInfoA
VerQueryValueA
VerInstallFileA

oleaut32

GetErrorInfo
SafeArrayPtrOfIndex
SysReAllocStringLen
RegisterTypeLib
SysAllocStringLen

shlwapi

PathIsContentTypeA
SHEnumValueA

kernel32

GetLocalTime
GetLocaleInfoA
GlobalAddAtomA
HeapAlloc
GetUserDefaultLCID
IsBadReadPtr
GetCommandLineW
LoadLibraryA
GetStdHandle
InitializeCriticalSection
GetLastError
GetStringTypeW
GetCommandLineA
GetProcessHeap
GlobalFindAtomA
VirtualAllocEx
LockResource
GetProcAddress
GlobalAlloc
GetStringTypeA
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
GetVersion
GlobalDeleteAtom
ExitThread
RaiseException
GetStartupInfoA
LoadResource
GetSystemDefaultLangID
LoadLibraryExA
GetThreadLocale
GetTickCount
LocalAlloc
HeapFree
ExitProcess

Sections

CODE
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc3
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc6
Size: 1024B - Virtual size: 615B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc2
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc5
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e488a399eb4d3cc908858aba8fa41acb

Headers

File Characteristics

Imports

advapi32

user32

gdi32

version

oleaut32

shlwapi

kernel32

Sections

CODE Size: 76KB - Virtual size: 76KB

.data Size: 1024B - Virtual size: 993B

.rsrc3 Size: 126KB - Virtual size: 126KB

.rsrc6 Size: 1024B - Virtual size: 615B

.rsrc2 Size: 15KB - Virtual size: 15KB

.rsrc8 Size: 1024B - Virtual size: 858B

.rsrc5 Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 1024B

CODE
Size: 76KB - Virtual size: 76KB

.data
Size: 1024B - Virtual size: 993B

.rsrc3
Size: 126KB - Virtual size: 126KB

.rsrc6
Size: 1024B - Virtual size: 615B

.rsrc2
Size: 15KB - Virtual size: 15KB

.rsrc8
Size: 1024B - Virtual size: 858B

.rsrc5
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 1024B