213c086539726168a87426ea1dad237a

Sharing

Copy URL Twitter E-mail

General

Target

213c086539726168a87426ea1dad237a
Size

169KB
MD5

213c086539726168a87426ea1dad237a
SHA1

9c132d451af7735af8493a4011aa67a822d0e728
SHA256

6500d118be3c2445a762ded66d6070d7d4db3678b8c7f0e76e62e5b0bceba82b
SHA512

7d3d8547a515f54596170b6bd00a3342236b01a884843ae42f8118c5a0599c44473d10168602cfd4c1d65c751cc5fd5ffe257203b94d68ef0c7c4c37d2a6bd7e
SSDEEP

3072:zc0W+mUBoB4WBBmb6a8GbGcLsvkn3/hcilGhFAEkHnRPbsU1QFTsSPeWTI11KJ/+:zc0WEBo6WnmoeGcLWkJciAOEkHRPP1Q6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213c086539726168a87426ea1dad237a

Files

213c086539726168a87426ea1dad237a
.dll windows:4 windows x86 arch:x86

208263936dc82cc98d4922186f351af7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventA
OpenEventA
Sleep
CreateThread
GetCurrentProcess
GetComputerNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
ExitProcess
ReadFile
CreateFileA
GetCommandLineA
GlobalUnlock
OutputDebugStringA
GetLocalTime
GetProcAddress
LoadLibraryA
GetCurrentThreadId
WritePrivateProfileStringA
GetSystemDirectoryA
TerminateThread
CloseHandle
TerminateProcess
OpenProcess
CreateRemoteThread
VirtualFreeEx
WriteProcessMemory
VirtualAllocEx
DeleteFileA
WriteFile
GetFileSize
VirtualProtectEx
SetThreadPriority
VirtualAlloc
VirtualFree
WideCharToMultiByte
MultiByteToWideChar
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
GetThreadPriority
GetWindowsDirectoryA
GetStringTypeW
GetStringTypeA
IsBadReadPtr
GlobalAlloc
GlobalLock
GetModuleHandleA
ReadProcessMemory
GlobalFree
GetCurrentProcessId
GetModuleFileNameA
RtlUnwind

user32

GetWindowThreadProcessId
GetMessageA
PostThreadMessageA
GetInputState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
ReleaseDC
GetDC
ToAscii
MapVirtualKeyA
GetKeyboardState
GetKeyState
GetAsyncKeyState
ToUnicode
wsprintfA
GetWindowTextA
FindWindowA
EnumChildWindows
SendMessageA
IsWindowEnabled
GetClassNameA
GetClientRect
ClientToScreen
GetForegroundWindow
IsWindowVisible

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

gdi32

GetPixel

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

208263936dc82cc98d4922186f351af7

Headers

File Characteristics

Imports

kernel32

user32

wininet

gdi32

advapi32

Sections

.text Size: 153KB - Virtual size: 152KB

sdata Size: 4KB - Virtual size: 4KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 153KB - Virtual size: 152KB

sdata
Size: 4KB - Virtual size: 4KB

.reloc
Size: 11KB - Virtual size: 10KB