131e07938d9face62ebd9d05b2830d58

Sharing

Copy URL Twitter E-mail

General

Target

131e07938d9face62ebd9d05b2830d58
Size

111KB
MD5

131e07938d9face62ebd9d05b2830d58
SHA1

bf1b14c151bd0131182e8962c00ee7bf0bc982b3
SHA256

e728c4b551c43aed28b30cb0fc4d0ea5d6b4f59c12a06b87448da41eb6800bd1
SHA512

85420886cd7c4889f684572785f746727aad429f1d905406ce1e5364bb07bc90bc6cf7a1bee78aca84956bd9e2a1acd038cf239d52c1e19481c8ff7be6430bdd
SSDEEP

3072:DRm+9ppDmJ+MU3gMfTmB+VbqLKMMiU1m9:DzDSWgqTBMLKNP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131e07938d9face62ebd9d05b2830d58

Files

131e07938d9face62ebd9d05b2830d58
.exe windows:4 windows x86 arch:x86

0893b1e93779c981b9daab31d5f02389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantCopyInd
VariantClear
SysAllocStringLen
LoadTypeLib

advapi32

ControlService
CreateServiceA
DeleteService
InitializeSecurityDescriptor
OpenProcessToken
OpenServiceA
QueryServiceStatus
SetSecurityDescriptorDacl
StartServiceA
CloseServiceHandle
AdjustTokenPrivileges

ole32

StgCreateDocfileOnILockBytes
CLSIDFromProgID
OleUninitialize
GetRunningObjectTable
DoDragDrop
CreateILockBytesOnHGlobal
CoTaskMemRealloc
CoTaskMemFree
CoRevokeClassObject
CoRegisterMessageFilter
CoCreateInstance
OleSetClipboard

user32

ShowCaret
GetWindowTextA
FillRect
DestroyCursor
CreateAcceleratorTableA
CharUpperA
CharPrevA
SetCursor

shell32

SHBindToParent
SHGetFileInfoA
SHFileOperationA

shlwapi

SHAutoComplete
PathFindFileNameA
StrChrA
StrStrIA
PathIsRelativeA
PathUnquoteSpacesA

msvcrt

memset
rand
sscanf
strchr
strcmp
strstr
time
_except_handler3
memchr
getenv
free
fflush
__set_app_type
malloc

kernel32

GetVersionExA
SetLastError
TlsFree
GetSystemTime
FreeResource
GetVersion

Exports

Exports

Elc
Jmb
Oxy
Rly

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0893b1e93779c981b9daab31d5f02389

Headers

File Characteristics

Imports

oleaut32

advapi32

ole32

user32

shell32

shlwapi

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 32KB - Virtual size: 36KB

.data Size: 23KB - Virtual size: 24KB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 24KB - Virtual size: 28KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 32KB - Virtual size: 36KB

.data
Size: 23KB - Virtual size: 24KB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 24KB - Virtual size: 28KB