152357342f9b85bee54cffffb3e54567

Sharing

Copy URL

Twitter E-mail

General

Target

152357342f9b85bee54cffffb3e54567
Size

213KB
MD5

152357342f9b85bee54cffffb3e54567
SHA1

08ee69e5a73faa9a6435c130fe0fabeac110ac52
SHA256

8acdc59d53ff100c577d746fcdc30972497e8f613920bbf280d3267d2bbd78dc
SHA512

e9559a38d08db021a26a85eda78ee6fd00c1fb7b14945fa91fc63fc40266423c2c87a9781fb627fb29525795cf62be23d7c1d132d321c1ec1383d93e04b29f5c
SSDEEP

6144:irHi+WwBFWP82Fv/7stPbK7UF0ZGWJ5q:irHi+WKFWP8o/7A/0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
152357342f9b85bee54cffffb3e54567

Files

152357342f9b85bee54cffffb3e54567
.exe windows:4 windows x86 arch:x86

8e2b547b88a1caa2497fbf9e108d5244

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
LCMapStringA
HeapValidate
FindResourceW
TlsFree
GetCommandLineA
HeapAlloc
LoadLibraryA
GetEnvironmentStringsW
LeaveCriticalSection
DeleteCriticalSection
FindFirstFileExA
FreeEnvironmentStringsW
GetStartupInfoW
InterlockedExchange
GetTickCount
GetModuleFileNameW
UnhandledExceptionFilter
VirtualFree
EnterCriticalSection
IsBadWritePtr
HeapDestroy
WriteFile
InitializeCriticalSection
EnumSystemCodePagesW
GetCurrentThreadId
SetLastError
TlsSetValue
GetProcAddress
GetCurrentThread
TlsGetValue
HeapFree
GetPrivateProfileSectionNamesW
HeapCreate
InterlockedIncrement
GetVersion
VirtualQuery
GetFileType
SetHandleCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetCurrentProcessId
GetEnvironmentStrings
TlsAlloc
HeapReAlloc
RtlUnwind
ExitProcess
GetCommandLineW
FreeEnvironmentStringsA
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
GetStdHandle
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameA

user32

GetForegroundWindow
DdeAbandonTransaction
DialogBoxParamW
CopyAcceleratorTableA
EnumThreadWindows
GetClassWord
AppendMenuA
CharNextW
DdeQueryNextServer
DrawIconEx
DdeCmpStringHandles
EnumDisplaySettingsA
ExcludeUpdateRgn
OemToCharBuffA
CascadeWindows
GetGuiResources
DdeFreeDataHandle
ReplyMessage
SetDlgItemTextA
CharUpperA
ReuseDDElParam

comdlg32

GetFileTitleA
GetOpenFileNameA
ReplaceTextW
GetOpenFileNameW
PageSetupDlgA
LoadAlterBitmap
GetSaveFileNameA
ReplaceTextA
GetSaveFileNameW
FindTextW
PrintDlgW
PrintDlgA
PageSetupDlgW
ChooseFontA
FindTextA

gdi32

CreateRectRgnIndirect
GetMetaRgn
GetBkMode
AddFontResourceA
RemoveFontResourceA
SetPixelV
GetBrushOrgEx
InvertRgn
ColorCorrectPalette
AngleArc
EnumFontFamiliesA
GetPaletteEntries
CombineTransform
GetCharWidth32W
GetViewportExtEx
SelectObject
DescribePixelFormat
GetDIBColorTable
AddFontResourceW
SetColorAdjustment

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e2b547b88a1caa2497fbf9e108d5244

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

gdi32

Sections

.text Size: 97KB - Virtual size: 97KB

.data Size: 103KB - Virtual size: 103KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 97KB - Virtual size: 97KB

.data
Size: 103KB - Virtual size: 103KB

.rsrc
Size: 11KB - Virtual size: 10KB