1a330a1b4ad4d5a9a5209e8c5490b291

Sharing

Copy URL Twitter E-mail

General

Target

1a330a1b4ad4d5a9a5209e8c5490b291
Size

145KB
MD5

1a330a1b4ad4d5a9a5209e8c5490b291
SHA1

df1956f1083ab6853243b839580f90336977c5cb
SHA256

42aa2dc9bf933c06305e29a39d87424522cd58faaeee404e3698ac4cd9a0771b
SHA512

873f210cc361fe00022844edeac063a80d9c0dcd9640303b2e844d5a8009b616d5b2214258d894b6818e2202289d14f5a17dd4a3eb9bba99b14cf72e662824f7
SSDEEP

3072:h6kdrOeLef3StDsYv7vQS/WWBz8gcpNNDuB/ogvTqX1+MnPhBtuni4PoBm:gqHKfwDt74UWBH7EKgvul+MpDuni4PoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a330a1b4ad4d5a9a5209e8c5490b291

Files

1a330a1b4ad4d5a9a5209e8c5490b291
.exe windows:4 windows x86 arch:x86

768eca63b907f69bc3653a9f2975fd96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
RtlUnwind
GetStartupInfoA
CreateThread
GetConsoleOutputCP
SetThreadAffinityMask
OpenEventA
GlobalMemoryStatus
GetStdHandle
GetProcessWorkingSetSize
ExitThread
VirtualQueryEx
FreeLibrary
GetLocaleInfoW
LocalFree
lstrcatA
GlobalAlloc
GetSystemDirectoryA
GetConsoleMode
ResetEvent
GetModuleHandleA
GetFileAttributesA
SetLastError

gdi32

CreateFontIndirectA
DeleteObject
CreatePen
LineTo
CreateDIBSection
GetTextExtentPoint32A
Polyline
CreateRectRgn
SetMapMode
SetBkColor
EndPage
StartPage
SetROP2
DeleteDC
SelectClipRgn
SelectObject
GetObjectA
GetBkMode
CreateCompatibleDC
GetTextMetricsA
SetTextColor

msvcrt

_mbsnicoll
_sys_nerr
_ismbckata
_sys_errlist
_chdir
iswalpha
_setjmp
_ultoa
_wgetcwd
_execlp
__p__commode
isalnum
_acmdln
_except_handler3
_XcptFilter
_wcslwr
_lock
_fstat
_safe_fprem
_wcsnicmp
_lrotr
_wexeclpe
exit
_assert
_ftime
_getdrive
_wutime
strtoul
tmpfile
_exit
_fcvt
_adjust_fdiv
__setusermatherr
_controlfp
_adj_fpatan
_mbsnbcat
_mbsnicmp
ldexp
__p__fmode
_wtol
_get_heap_handle
_mbscoll
memcpy
__set_app_type
_heapchk
wcsspn
_setmode
_initterm
_adj_fdivr_m16i
__getmainargs

user32

EnableWindow
GetKeyState
GetClassNameA
GetSubMenu
InvalidateRgn
GetPropA
TrackPopupMenuEx
GetUpdateRgn
BeginPaint
GetDC
MessageBoxA
EmptyClipboard
PeekMessageA
DestroyWindow
DeferWindowPos
ChildWindowFromPoint
DefWindowProcA
EndPaint
EndDialog
UpdateWindow
GetFocus
GetClassLongA
FindWindowExA
PostMessageA
GetWindowPlacement
DrawMenuBar
SetMenuItemInfoA
SendMessageTimeoutA
ReleaseCapture

Sections

.text
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

768eca63b907f69bc3653a9f2975fd96

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msvcrt

user32

Sections

.text Size: 126KB - Virtual size: 126KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 104KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 126KB - Virtual size: 126KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 104KB

.rsrc
Size: 7KB - Virtual size: 6KB