1048492b2bc34e348e322d7a56bf8665

Sharing

Copy URL Twitter E-mail

General

Target

1048492b2bc34e348e322d7a56bf8665
Size

424KB
MD5

1048492b2bc34e348e322d7a56bf8665
SHA1

39d4ac233b40bf713a0aafa5ac80b167f4ad3997
SHA256

901169a271113fe3a5c880c34f8782a064177cc57851e214e5d3fe95ca4fd08e
SHA512

8352961c1967dd9c72ffb5d74d4dc05f9913a4cec932c87ab542863d7814ff8087d1a014f7da988707a70eb8df7d85e57b40acab1c5ae4434f743be4e599a60a
SSDEEP

6144:V2mcypSXaS5UOUdLdCJ9z5CR6wyK+lZlc3G0B/cNN/ws8vnbUumaXxLcl7tV+qK:vcVbRUDy9A3W43G0llvnbUNahLclpU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1048492b2bc34e348e322d7a56bf8665

Files

1048492b2bc34e348e322d7a56bf8665
.exe windows:4 windows x86 arch:x86

28ca7f47e9bc5fbb5e8dd9ef3af25792

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BringWindowToTop
EnableScrollBar
CharUpperA
CreateDesktopW
CreateIconFromResourceEx
DdeDisconnect
CreateDialogParamA
DdePostAdvise

gdi32

GetPolyFillMode
DrawEscape
CreateEnhMetaFileA
SetMetaFileBitsEx
BitBlt
GetRegionData
StartDocA
PlayMetaFile
CreateMetaFileA
StartDocW
GetTextFaceA
SwapBuffers
SetDeviceGammaRamp
AddFontResourceA
GetCharWidthA
CreateColorSpaceA
GetViewportExtEx
GetMiterLimit
GetTextColor
GetRandomRgn
GetViewportOrgEx
GetGlyphOutline
SetBitmapBits
GetStockObject

msvcrt

tanh
wcstombs
_wsopen
_wenviron
abort
_beginthread
vsprintf
_setmbcp
isalpha
_wsystem
_wrmdir
_ismbbkalnum
atol
_execv
_tell
__doserrno
_lseek
localtime
_wfdopen

kernel32

lstrlenA
CreateRemoteThread
ReleaseMutex
GetProfileStringW
ClearCommError
GetLocalTime
lstrlenW
EnumTimeFormatsW
CloseConsoleHandle
LocalFileTimeToFileTime
MoveFileA
LocalAlloc
GetModuleHandleW
SetConsoleWindowInfo
GetStartupInfoA
SearchPathW
GetFullPathNameW
DeleteAtom
SetEndOfFile
GlobalHandle
VirtualAlloc
SetConsoleMaximumWindowSize
GlobalFindAtomW
ResetEvent
VirtualFree
GetCommandLineW
GetModuleHandleA
SetLastError
GetPrivateProfileSectionNamesA
HeapLock
GetConsoleAliasesW
GetLocaleInfoW
LoadModule
SetCommMask
CreateDirectoryA
FileTimeToLocalFileTime
GetDiskFreeSpaceExA
EnumSystemCodePagesW
GetConsoleTitleW
GetCurrentProcessId
HeapFree
EnumCalendarInfoA
GetTimeFormatA
ExitProcess
Sleep
GetTickCount
EnumCalendarInfoExW
GlobalWire
ReadConsoleInputExA

comdlg32

dwOKSubclass

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mstv
Size: 377KB - Virtual size: 874KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jwde
Size: 38KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28ca7f47e9bc5fbb5e8dd9ef3af25792

Headers

File Characteristics

Imports

user32

gdi32

msvcrt

kernel32

comdlg32

Sections

.text Size: 7KB - Virtual size: 7KB

.mstv Size: 377KB - Virtual size: 874KB

.jwde Size: 38KB - Virtual size: 92KB

.reloc Size: 1024B - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.mstv
Size: 377KB - Virtual size: 874KB

.jwde
Size: 38KB - Virtual size: 92KB

.reloc
Size: 1024B - Virtual size: 1KB