1b7c4ad82b58a15bab65afa35e224ab2

General

Target

1b7c4ad82b58a15bab65afa35e224ab2
Size

181KB
MD5

1b7c4ad82b58a15bab65afa35e224ab2
SHA1

c4213fe13fcc7c1f083594d5aba010c96bbdc9ed
SHA256

b436957e525042aa3b621751fe42f59b3008d4271e5d15203f0c986add96b381
SHA512

be691c3a434b0c29ef5077bfcf3e60b13adb809313d4d7a74ffb7b0b265e557f6bf5bae05ee9fdd33bd1f5ca27e22cd93e079216530df366976fe008cfead190
SSDEEP

3072:bDNd28v9qFfzaUKH0GG4dTh9zTGugIXDbF7Hc46O+vRWOxYGRVtMSAdy6DhTdAKf:fqdaUKmCN1yxIXvNHc46O+wkRVyS4tl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b7c4ad82b58a15bab65afa35e224ab2

Files

1b7c4ad82b58a15bab65afa35e224ab2
.exe windows:4 windows x86 arch:x86

b3feeed3d54160fae02f0eccf0e30871

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructW
lstrcatW
MoveFileW
WaitForMultipleObjectsEx
FlushConsoleInputBuffer
GetConsoleTitleA
GetNamedPipeHandleStateW
lstrcatA
GetConsoleCharType
FindResourceExA
DeleteCriticalSection
EnumResourceLanguagesA
WriteConsoleOutputW
MultiByteToWideChar
OpenEventA
GetBinaryTypeA
GetVersionExW
InterlockedIncrement
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SetWindowStationUser
ScrollChildren
GetWindowRgn
SetKeyboardState
GetMenu
EnumDisplayDevicesA
SendDlgItemMessageA
LoadCursorFromFileW
CreateWindowExW
CreateDialogIndirectParamW
RegisterDeviceNotificationW
SetClipboardViewer
GetClientRect
UserRegisterWowHandlers
GetCursorFrameInfo
DefFrameProcA
RegisterLogonProcess
DrawFrame
DdeEnableCallback

shell32

StrRStrA
StrRStrIA
SHHelpShortcuts_RunDLLA

gdi32

GetNearestColor
CreateFontIndirectA
GdiGetPageHandle

Sections

CODE
Size: 5KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b3feeed3d54160fae02f0eccf0e30871

Headers

File Characteristics

Imports

kernel32

user32

shell32

gdi32

Sections

CODE Size: 5KB - Virtual size: 811KB

.data Size: 172KB - Virtual size: 175KB

.rsrc Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 1KB

CODE
Size: 5KB - Virtual size: 811KB

.data
Size: 172KB - Virtual size: 175KB

.rsrc
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 1KB