1b8bf653e6b37cac102422da0567a2ec

General

Target

1b8bf653e6b37cac102422da0567a2ec
Size

43KB
MD5

1b8bf653e6b37cac102422da0567a2ec
SHA1

e719a17c6ea85327b53f1727a6312b1678407390
SHA256

2b5e6fd4079bc0ef73f50ed6eb571dc8a6153e262c873fce0c81e16c75d56fee
SHA512

80b8cd828ef8dcf859763a6e5bea35e44e7478aa60d9a93a8a4bfb8479d002b853ab7266cd4b53cbf3b108be5dcc064d7683e7ca7b3e0766e62b62b5e1a492cb
SSDEEP

768:K9V9lwtp3EsQ7nxBHdICSDFaplj0FxkIWml69V8BLdyrRp894n+UONJQ1X/P6h7:4ctpUXZdoDFaPjAKceeLUs9tNJQ1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8bf653e6b37cac102422da0567a2ec

Files

1b8bf653e6b37cac102422da0567a2ec
.exe windows:4 windows x86 arch:x86

e1ed45401207c1535fdc83a31366a121

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
BuildCommDCBAndTimeoutsA
CreateDirectoryExA
ExitProcess
FreeLibrary
GetFileAttributesExW
GetLogicalDriveStringsW
GetSystemTime
GetTempFileNameA
IsBadHugeWritePtr
IsValidCodePage
OutputDebugStringW
SetConsoleCursorInfo
SetConsoleScreenBufferSize
SetCriticalSectionSpinCount
SetMessageWaitingIndicator
SetThreadPriority
SetVolumeLabelA
WaitForSingleObjectEx
WriteFileEx
_lclose
lstrcatA
lstrcmpA

user32

AdjustWindowRectEx
AppendMenuW
BeginPaint
BringWindowToTop
CallMsgFilter
CascadeChildWindows
CharLowerBuffA
CharNextW
CharPrevW
CreateDialogParamA
CreateWindowExA
DdeEnableCallback
DeleteMenu
EnableScrollBar
GetCapture
GetClassLongA
GetClipCursor
GetGuiResources
GetMenuState
InsertMenuW
LoadBitmapA
LoadStringA
OemToCharBuffW
PackDDElParam
SetPropW
SetWinEventHook
SetWindowTextA
TileChildWindows

gdi32

CheckColorsInGamut
CreateFontIndirectW
DeviceCapabilitiesExW
ExcludeClipRect
FloodFill
GetBkMode
GetGlyphOutlineA
GetMetaFileBitsEx
GetNearestPaletteIndex
GetObjectW
GetTextColor
GetTextExtentPoint32W
PlayMetaFile
PlayMetaFileRecord
PolyTextOutW
Polygon
RectInRegion
SetMagicColors
SetSystemPaletteUse
UnrealizeObject

Sections

.text
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1ed45401207c1535fdc83a31366a121

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 16KB

.data Size: 41KB - Virtual size: 52KB

.rdata Size: - Virtual size: 8KB

.rsrc Size: - Virtual size: 8KB

.text
Size: 512B - Virtual size: 16KB

.data
Size: 41KB - Virtual size: 52KB

.rdata
Size: - Virtual size: 8KB

.rsrc
Size: - Virtual size: 8KB