1b1b8865d661035b8d27161b03166948

General

Target

1b1b8865d661035b8d27161b03166948
Size

191KB
MD5

1b1b8865d661035b8d27161b03166948
SHA1

8d859bcaa8351645708533db45cc2598d56be439
SHA256

2ae0d09b765920c254af1fdeaf898dc5aaaad751127a105787b7dfe7b4a377ed
SHA512

8fc05b4a9d122512cf5cdbabe472d3d8f4ad8266fa738a4e129297ee8330baac13a758dd1be6cb71e3ea7a85a6ba0f2ff3a92cab012199e19e21ac5b196e5cc7
SSDEEP

3072:nQZ0cnW5bcApYlwvQ0s3pCE17mtmv89OoZ4Lv+Gq2JwlrdiqKm/:nKDnWhcmmwvQ13p9mU0xZmv+llDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1b8865d661035b8d27161b03166948

Files

1b1b8865d661035b8d27161b03166948
.exe windows:4 windows x86 arch:x86

8e93928993db1cc4ac1062c7ed97e4a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strncmp
tolower
_ftol
rand
srand
memset
__CxxFrameHandler
memmove
_itoa
_except_handler3

kernel32

CreateFileA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
SetFileAttributesA
DeleteFileA
GetFileAttributesA
CreateDirectoryA
IsBadWritePtr
GetCurrentThreadId
GetCommandLineA
CopyFileA
GetStartupInfoA
CreateProcessA
SetUnhandledExceptionFilter
GetTickCount
GetSystemDirectoryA
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetCurrentProcess
CreateEventA
WaitForSingleObject
GetModuleFileNameA
SleepEx
GetProcAddress
GetModuleHandleA
GetLastError
Sleep
ExitProcess
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
CloseHandle
WriteFile
SetFilePointer

shlwapi

SHGetValueA
SHCopyKeyA
SHDeleteKeyA

user32

GetActiveWindow
wsprintfA
CharNextA
FlashWindow

ws2_32

closesocket
getprotobynumber

Sections

CODE
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e93928993db1cc4ac1062c7ed97e4a7

Headers

File Characteristics

Imports

msvcrt

kernel32

shlwapi

user32

ws2_32

Sections

CODE Size: 16KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 165KB

.rsrc Size: 4KB - Virtual size: 3KB

CODE
Size: 16KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 165KB

.rsrc
Size: 4KB - Virtual size: 3KB