10351645d9e1c2b3df65d375bad05491

Sharing

Copy URL Twitter E-mail

General

Target

10351645d9e1c2b3df65d375bad05491
Size

302KB
MD5

10351645d9e1c2b3df65d375bad05491
SHA1

ed42a655b13d6fad97a2034ce17da31da24af649
SHA256

1ed70edbe7390d6e464ec5469f510014c5e96743517e14a110212a73ef6fc55d
SHA512

6179a87ad5c942a48881e51b24da451a4b4c2f1918e049fa1eef13c94dd14f807319556f00c0aa422fa6a977d678c4b16844ef8850c63d5a3e4bee62241a2717
SSDEEP

6144:no6ZdxqIdmtP7cY6Mv7pxiEwt5TTNDc+OuHAF2QstMREDMkBTvsBix:o8qpP7Rz0vaL7F5s+EDMkZvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10351645d9e1c2b3df65d375bad05491

Files

10351645d9e1c2b3df65d375bad05491
.exe windows:4 windows x86 arch:x86

f14e63579f24f8dc68fe16f91819393d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

gdi32

ExcludeClipRect
ScaleViewportExtEx
GetAspectRatioFilterEx
FixBrushOrgEx
GetMetaFileA
GetDeviceCaps
GetCharABCWidthsW
GetBkColor
SetTextJustification
CreateDCA
DeleteDC
SelectClipPath
GetEnhMetaFileDescriptionA

kernel32

InitializeCriticalSection
GetStdHandle
GetCurrentThreadId
GetTickCount
SetHandleCount
GetStringTypeA
EnterCriticalSection
FreeEnvironmentStringsA
InterlockedIncrement
GetTimeZoneInformation
ReadFile
GetCurrentProcessId
CompareStringW
UnhandledExceptionFilter
HeapReAlloc
DeleteCriticalSection
GetCurrentThread
QueryPerformanceCounter
CloseHandle
GetProcAddress
GetCommandLineW
HeapAlloc
IsBadWritePtr
TlsAlloc
GetEnvironmentStringsW
OpenMutexA
TlsSetValue
GetCPInfo
VirtualAlloc
GetEnvironmentStrings
WriteConsoleInputW
GetVersion
SetEnvironmentVariableA
SetFilePointer
GetModuleFileNameA
HeapFree
VirtualFree
GetModuleFileNameW
CompareStringA
GetProcAddress
LCMapStringW
InterlockedExchange
TlsFree
TlsGetValue
TerminateProcess
HeapCreate
GetFileType
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
MultiByteToWideChar
LeaveCriticalSection
WideCharToMultiByte
GetLocalTime
CreateMutexA
RtlUnwind
GetModuleHandleA
VirtualQuery
ExitProcess
HeapDestroy
GetStartupInfoW
SetLastError
FlushFileBuffers
GetCurrentProcess
GetSystemTime
LoadLibraryA
GetStringTypeW
SetStdHandle
LCMapStringA
GetCommandLineA
GetStartupInfoA
InterlockedDecrement
WriteFile
GetLastError

user32

DrawTextExA
GetClassInfoExA
CallMsgFilterA
DdeUninitialize
CountClipboardFormats
ReleaseDC
RegisterClassA
ValidateRgn
MessageBoxA
IsMenu
GetWindowLongA
RegisterClassExA
GetMonitorInfoA
OemToCharBuffA
BroadcastSystemMessageW
DlgDirSelectExA
wsprintfW
EndTask
GetNextDlgTabItem
GetMenuItemInfoA
SetCursorPos
DdeConnectList
CreateWindowExA
ShowWindow
EnumDisplaySettingsExW
LoadImageW
DefWindowProcW
PostMessageW
CopyImage

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f14e63579f24f8dc68fe16f91819393d

Headers

File Characteristics

Imports

comctl32

gdi32

kernel32

user32

Sections

.text Size: 179KB - Virtual size: 178KB

.rdata Size: 23KB - Virtual size: 42KB

.data Size: 87KB - Virtual size: 87KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 179KB - Virtual size: 178KB

.rdata
Size: 23KB - Virtual size: 42KB

.data
Size: 87KB - Virtual size: 87KB

.rsrc
Size: 12KB - Virtual size: 11KB