115dd043c6b8d1dd1de9ffa9eb4feaf1

Sharing

Copy URL Twitter E-mail

General

Target

115dd043c6b8d1dd1de9ffa9eb4feaf1
Size

110KB
MD5

115dd043c6b8d1dd1de9ffa9eb4feaf1
SHA1

4bf7c42aa15382f8291f447945a1c2b727edb306
SHA256

69871f7bf54a5d52cd9f95b208024f2e1ffd8934b686a66a963d4affb75c4528
SHA512

15554638e047aeeea69d2b553d9501703c0705265f8ff03a954ba974ffd79bb6f1aa6ab9f2f4e8a8b6a48fa5bbf9317536eebfad3b2e11c39e7376d386682e59
SSDEEP

1536:h0LFGxfLR3JaTNjDTJIBTtL9qfEovoWODtaqPhNm1ekqan2TMI:hMGh1Ja1q3L9qfHIDbJNvV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
115dd043c6b8d1dd1de9ffa9eb4feaf1

Files

115dd043c6b8d1dd1de9ffa9eb4feaf1
.exe windows:4 windows x86 arch:x86

3a399fea71366d5fe6375f2b27eb116a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetModuleHandleA
CreateThread
SetEvent
VirtualAlloc
lstrlenA
lstrcatA
ExitProcess
GetStringTypeW
GetDateFormatA
GetProcAddress
GetEnvironmentStrings
LocalAlloc
VirtualAllocEx
GetLocalTime
GlobalAlloc
FindFirstFileA
GetACP
GetOEMCP
GetThreadLocale
SizeofResource

gdi32

SetBkColor
CreatePenIndirect
GetDIBColorTable
GetRgnBox
GetPixel
CreateDIBitmap
CreateFontIndirectA
GetDCOrgEx

shell32

SHFileOperationA
Shell_NotifyIconA
SHGetFolderPathA
SHGetFileInfoA

version

VerFindFileA
GetFileVersionInfoA

user32

ShowWindow
GetScrollRange
CharUpperBuffA
EnumWindows
DestroyWindow
GetDC
SetWindowsHookExA
TrackPopupMenu
GetKeyboardLayoutNameA
DrawIconEx
GetFocus
EnableMenuItem
ReleaseDC
InsertMenuA
GetClassLongA
GetMenuState
GetClassInfoA
MessageBeep
SetScrollInfo
CallWindowProcA
GetActiveWindow
DrawFrameControl
DestroyIcon
GetMenuItemCount
ClientToScreen
SetPropA
IsRectEmpty
CharNextW
SystemParametersInfoA
DestroyCursor
GetForegroundWindow
RemovePropA
InsertMenuItemA
GetKeyboardState
DestroyMenu
GetIconInfo
CreatePopupMenu
DeleteMenu
GetKeyState
LoadKeyboardLayoutA
PtInRect
ShowScrollBar
SendMessageA
UnregisterClassA
GetWindowLongA
GetSystemMetrics
GetDesktopWindow
FindWindowA
GetWindowLongW
SetWindowPos
ShowOwnedPopups
SetCursor
InvalidateRect
CloseClipboard
GetScrollPos
CallNextHookEx
CreateIcon
GetPropA
SetClipboardData
ReleaseCapture
GetParent
SetActiveWindow
GetClipboardData
ScrollWindow
GetCursor
IsWindowUnicode
EnumThreadWindows
PostMessageA
MessageBoxA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a399fea71366d5fe6375f2b27eb116a

Headers

File Characteristics

Imports

kernel32

gdi32

shell32

version

user32

Sections

.text Size: 29KB - Virtual size: 28KB

.idata Size: 3KB - Virtual size: 3KB

.edata Size: 75KB - Virtual size: 75KB

.data Size: 1024B - Virtual size: 996B

.text
Size: 29KB - Virtual size: 28KB

.idata
Size: 3KB - Virtual size: 3KB

.edata
Size: 75KB - Virtual size: 75KB

.data
Size: 1024B - Virtual size: 996B