1f42515e3f3a39cfcfad0e19bb8acac6

General

Target

1f42515e3f3a39cfcfad0e19bb8acac6
Size

40KB
MD5

1f42515e3f3a39cfcfad0e19bb8acac6
SHA1

c667ee2c8089b5bcfa3fdb79e9259fb529d56e93
SHA256

1123d33582a714986c4bd84a52747a8c2755665866c8d4ca3690cfc2faa179fb
SHA512

e3ed207a3dbc9028d6834a65049db5886fffde58cac22b97190719f197caec6acfe6cff004bc5990797fb23d00b4217c76ab0e652fbba35941b327ebd7b8b91e
SSDEEP

768:84OU+B5ii6DGWl8aU+xU9SnmNy/qiAMeEjGE6xHfs4QgdFGRabCpGLhS:83Usi9KjaxxejOZjGJs4QywkbCpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f42515e3f3a39cfcfad0e19bb8acac6

Files

1f42515e3f3a39cfcfad0e19bb8acac6
.exe windows:4 windows x86 arch:x86

2a36f4d17536ddc045d9b8829ba38fd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateIoCompletionPort
CreateMailslotA
CreateProcessW
EraseTape
ExitProcess
FlushConsoleInputBuffer
FreeLibrary
GetFileAttributesExA
GetLocaleInfoW
GetNamedPipeHandleStateA
GetNumberFormatW
GetProcAddress
GetVersion
GetVersionExA
GlobalGetAtomNameA
IsBadWritePtr
IsValidCodePage
LockResource
PulseEvent
ReadFileEx
SetConsoleCtrlHandler
SetMailslotInfo
SetThreadPriority
SwitchToFiber
VirtualAllocEx
WaitForSingleObject
WaitNamedPipeW
lstrcatA

user32

BlockInput
CharNextExA
CharUpperBuffW
DlgDirListComboBoxA
EndPaint
EnumClipboardFormats
FrameRect
GetListBoxInfo
GetMenuItemRect
GetPropW
GetScrollBarInfo
IntersectRect
LoadBitmapA
RegisterSystemThread
SendIMEMessageExW
SendMessageTimeoutA
SetMenuContextHelpId
ShowWindowAsync
TrackPopupMenuEx
UnregisterHotKey

gdi32

AbortPath
AddFontResourceA
CloseEnhMetaFile
CloseFigure
ColorMatchToTarget
CreateBitmap
CreateFontIndirectA
CreateMetaFileW
CreatePen
DeleteObject
EnumMetaFile
FillRgn
GdiPlayScript
GetBkColor
GetCharABCWidthsFloatA
GetGlyphOutline
GetKerningPairs
GetMapMode
GetPaletteEntries
OffsetRgn
PolyDraw
ResizePalette
SelectClipPath
SetEnhMetaFileBits
SetPixel
SetWindowOrgEx

Sections

.text
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a36f4d17536ddc045d9b8829ba38fd6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 16KB

.data Size: 39KB - Virtual size: 56KB

.idata Size: - Virtual size: 8KB

.rsrc Size: - Virtual size: 4KB

.text
Size: 512B - Virtual size: 16KB

.data
Size: 39KB - Virtual size: 56KB

.idata
Size: - Virtual size: 8KB

.rsrc
Size: - Virtual size: 4KB