10d41281ceda274a868f5d1be6b6519c

Sharing

Copy URL Twitter E-mail

General

Target

10d41281ceda274a868f5d1be6b6519c
Size

305KB
MD5

10d41281ceda274a868f5d1be6b6519c
SHA1

6927f4ae9a22b29b8cec758baf89fb4ea0867f73
SHA256

2714c0dbced6f9d39d5ec4f7ee3c8609e4d70b25738cb1d7b3bd0eb20eaeebba
SHA512

2a8cfb733d2aecc9da381ff4d08cd018e1e178ba41411c9cc12ad65608361d0962f53ebbd3bfbdf3b177f0267e5c22f853432f1ca35636045125241fc08df6f5
SSDEEP

6144:b5F1j4m9qgwB/3xX7SukiiWDiepWAje6hcUjhA+ELaW52Fen5:b5bnsJ3xX7SNiiiijb66UmV0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10d41281ceda274a868f5d1be6b6519c

Files

10d41281ceda274a868f5d1be6b6519c
.exe windows:4 windows x86 arch:x86

cf6b6d086db8fe1a2c254f75dbfe54cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
GetCommandLineA
HeapSize
GetCurrentDirectoryA
GetCommandLineW
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
Sleep
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindFirstFileW
ResetEvent
CompareStringA
FindFirstFileA
GetProcessHeap
GetSystemInfo
GetProcAddress
SetEvent
GetEnvironmentVariableA
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
SizeofResource
GetCurrentThreadId
GetConsoleMode
GlobalAlloc
GetVersion
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
GetLocalTime
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InterlockedDecrement
SetLastError
OutputDebugStringA
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
InterlockedCompareExchange
FormatMessageW
LocalFree
GetExitCodeProcess
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
lstrcatA
LocalAlloc
GetLocaleInfoA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
SetEndOfFile
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetUserDefaultLCID
GetSystemDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLangID
CreateProcessA
IsValidCodePage
UnmapViewOfFile
VirtualFree
LeaveCriticalSection
VirtualAlloc

user32

GetSystemMetrics
DefWindowProcA
BeginPaint
PeekMessageA
MapWindowPoints
EndPaint
ReleaseDC
SetTimer
GetWindowLongA
IsIconic
LoadStringA
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
GetParent
GetWindowRect
DestroyWindow
GetCursorPos
GetDC
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
SetFocus
DrawTextA
InvalidateRect
SendMessageA
GetClientRect
GetFocus
SetCursor
SetWindowLongA
SetWindowTextA
CheckMenuItem
CreateWindowExA
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
EndDialog
MessageBeep
SetDlgItemTextA
MoveWindow
MessageBoxA
GetSysColor
DispatchMessageW
GetMessageA
EnableMenuItem

gdi32

SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
CreateCompatibleDC

msvcrt

_strcmpi
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
_controlfp
_onexit

Sections

.text
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf6b6d086db8fe1a2c254f75dbfe54cd

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 295KB - Virtual size: 295KB

.data Size: 5KB - Virtual size: 5KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 295KB - Virtual size: 295KB

.data
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 3KB - Virtual size: 2KB