1100698b61b235b4e64b241e1ec9e649

Sharing

Copy URL

Twitter E-mail

General

Target

1100698b61b235b4e64b241e1ec9e649
Size

102KB
MD5

1100698b61b235b4e64b241e1ec9e649
SHA1

ae2b60f87014366624b0f0561791dbfe9b3b3cfc
SHA256

3d018d170242b4bbdd0f36858723dcc29910844e99a56395513033c3ff74ad06
SHA512

737fb21513097ba4e9579a3c6cce41ba50a3f3e65f3346a735364a61be3b6159ea4e98dc8b415474f8303bdf4fb06923ac4919d9ab878309742cd3c7b033dc9e
SSDEEP

1536:YNS8dJau+12Po9C3xWEn+LhfaSj4/PoaPao1xqbzyWe:4S2+1zCBJ+lfZU5P7K3yW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1100698b61b235b4e64b241e1ec9e649

Files

1100698b61b235b4e64b241e1ec9e649
.exe windows:4 windows x86 arch:x86

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindows
GetClientRect
GetCursorPos
SetWindowPos
EnableScrollBar
PostQuitMessage
DestroyWindow
GetDC
SendMessageW
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
ActivateKeyboardLayout
GetWindowDC
LoadStringA
RedrawWindow
CreateIcon
SetPropA
GetKeyNameTextA
GetLastActivePopup
SetScrollPos
GetSystemMetrics
GetFocus
OpenClipboard
LoadKeyboardLayoutA
SetScrollRange
EnableMenuItem
GetMenuItemCount
EnumChildWindows
IsRectEmpty
SendMessageA
DeleteMenu
IsChild
DestroyCursor
SetForegroundWindow
RegisterWindowMessageA
IsDialogMessageW
LoadIconA
MoveWindow
GetCapture
SetParent
SetActiveWindow
CharToOemA
DrawEdge
MapVirtualKeyA
InsertMenuItemA
GetActiveWindow
GetDesktopWindow
PeekMessageW
GetWindowRect
WindowFromPoint
ScreenToClient
GetMenuState
GetScrollInfo
EqualRect
CallNextHookEx
SetClipboardData
LoadBitmapA
CharNextA
CharLowerA
SetWindowPlacement
AdjustWindowRectEx
SetCursor
DefWindowProcA
IsDialogMessageA
DefFrameProcA
CallWindowProcA
GetKeyboardState
SetMenu
IsWindow
GetIconInfo
PostMessageA
GetDCEx
GetScrollRange
InflateRect
CharLowerBuffA
CheckMenuItem
ClientToScreen
ChildWindowFromPoint
TrackPopupMenu
CharUpperBuffA
IsWindowEnabled
DrawTextA
ScrollWindow
DispatchMessageW
EnumThreadWindows
IsZoomed
GetSysColorBrush
GetForegroundWindow
DispatchMessageA
DestroyMenu
ShowOwnedPopups
PtInRect
MapWindowPoints
GetClassInfoA
GetMenuItemInfoA

kernel32

VirtualAllocEx
GetModuleHandleA
EnumCalendarInfoA
GetStartupInfoA
ExitProcess
GlobalAlloc
WaitForSingleObject
SetEndOfFile
FreeResource
SetLastError
lstrcmpA
FormatMessageA
LoadResource
GetCommandLineA
GetProcAddress
lstrcpyA
SetEvent

shell32

SHGetDesktopFolder
SHGetFolderPathA
Shell_NotifyIconA

version

VerFindFileA
GetFileVersionInfoSizeA

gdi32

GetDIBColorTable
SelectObject
GetPaletteEntries
GetRgnBox
CreateFontIndirectA
BitBlt
CreateBrushIndirect
GetDIBits

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8413da8e3de694f79828b4b5121589e9

Headers

File Characteristics

Imports

user32

kernel32

shell32

version

gdi32

Sections

.text Size: 27KB - Virtual size: 27KB

.tls Size: 67KB - Virtual size: 67KB

.idata Size: 3KB - Virtual size: 2KB

DATA Size: 2KB - Virtual size: 1KB

BSS Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 27KB

.tls
Size: 67KB - Virtual size: 67KB

.idata
Size: 3KB - Virtual size: 2KB

DATA
Size: 2KB - Virtual size: 1KB

BSS
Size: 1KB - Virtual size: 1KB