13516c9b0dd72726d0798aeae556e73c

Sharing

Copy URL Twitter E-mail

General

Target

13516c9b0dd72726d0798aeae556e73c
Size

53KB
MD5

13516c9b0dd72726d0798aeae556e73c
SHA1

c2f1ed14d215c38dd236995c08d0e28e43f4b97b
SHA256

48130c7e2db78da1f3cadb6fcfa48da7a2704da1998b0ddc9fa3dfcf19813027
SHA512

afdb0f199c1aed07f34885a94ec53bb68692fe4277076726613e82811da49e06f0edcb61d59879fb494cb6fe2c1e36261e82b01a0c0fd828730c613b60c2aa71
SSDEEP

768:jGWh7R4tLBmrIjPAgJpg22zAkq7kqo2J68OnPCUZuvzjWp+k2MLE2HmA0ss:zrID3JpyzWNxJ6TaGuvzjc+2GTD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13516c9b0dd72726d0798aeae556e73c

Files

13516c9b0dd72726d0798aeae556e73c
.exe windows:1 windows x86 arch:x86

228639ebb2a5b5bc59998514cd04b59b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

gdi32

CreatePen
DeleteObject
LineTo
MoveToEx
SelectObject

winmm

waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader

user32

CharUpperBuffA
DialogBoxParamA
EndDialog
GetClientRect
GetDC
GetDlgItem
InvalidateRect
IsDlgButtonChecked
KillTimer
LoadIconA
MessageBoxA
PostMessageA
ReleaseDC
SendDlgItemMessageA
SetClassLongA
SetDlgItemTextA
SetTimer
SetWindowTextA
ShowWindow
UpdateWindow
WinHelpA
wsprintfA

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetEnvironmentVariableW
SetEvent
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile

Sections

AUTO
Size: 39KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 30KB - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

228639ebb2a5b5bc59998514cd04b59b

Headers

File Characteristics

Imports

advapi32

gdi32

winmm

user32

kernel32

Sections

AUTO Size: 39KB - Virtual size:

.idata Size: 2KB - Virtual size:

DGROUP Size: 4KB - Virtual size:

.bss Size: 30KB - Virtual size:

.reloc Size: 3KB - Virtual size:

.rsrc Size: 3KB - Virtual size:

AUTO
Size: 39KB - Virtual size:

.idata
Size: 2KB - Virtual size:

DGROUP
Size: 4KB - Virtual size:

.bss
Size: 30KB - Virtual size:

.reloc
Size: 3KB - Virtual size:

.rsrc
Size: 3KB - Virtual size: