216b5c1394a6c372b9e26cdd31608213

Sharing

Copy URL Twitter E-mail

General

Target

216b5c1394a6c372b9e26cdd31608213
Size

108KB
MD5

216b5c1394a6c372b9e26cdd31608213
SHA1

0a55fa6c018cd6c2b5d15b0573d80bb37f25931b
SHA256

93cc5146fb3032b9d0e608018884f22b12870ada4b3b98416bc83d249b9f0322
SHA512

46869ed30114dae2c03a51c4d4ac223e4540d4195c564bf9aedbe93781111a4f1d9bda368cc8e24fe4a57ad019e2f61cafb73a8bd51ba3a30639a5c1c614f7b4
SSDEEP

1536:AdKWk2RKCqDyi0xY5eTmvw0j0Y6+8rCfe+p8qEMkq804:AAwzi0GZvw9Y6prae+p8XPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216b5c1394a6c372b9e26cdd31608213

Files

216b5c1394a6c372b9e26cdd31608213
.exe windows:4 windows x86 arch:x86

d5ea15b5851add8df9dee74197eadf9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA

kernel32

VirtualQuery
GetStdHandle
FindFirstFileA
FindClose
GetSystemDefaultLangID
ExitThread
GetDiskFreeSpaceA
VirtualAllocEx
Sleep
GlobalAlloc
MoveFileExA
SetThreadLocale
VirtualFree
GetModuleHandleA
GetProcAddress

gdi32

SaveDC
CopyEnhMetaFileA
CreatePalette
GetDIBColorTable
GetPixel
BitBlt
GetClipBox
CreateBrushIndirect
SetPixel

user32

SetClipboardData
EnumWindows
GetSubMenu
PeekMessageA
IsRectEmpty
CheckMenuItem
TranslateMDISysAccel
DrawEdge
GetWindowLongW
DefMDIChildProcA
GetClassNameA
IsDialogMessageA
RegisterClipboardFormatA
ScreenToClient
ChildWindowFromPoint
InsertMenuA
FrameRect
IsWindow
GetMenuItemID
wsprintfA
MsgWaitForMultipleObjects
IsWindowVisible
GetWindowTextA
GetKeyboardLayoutList
IsWindowEnabled
EnableScrollBar
WaitMessage
GetSystemMenu
FindWindowA
CreateWindowExA
OpenClipboard
LoadStringA
MessageBeep
GetFocus
GetKeyboardLayout
GetCapture
ScrollWindow
DrawMenuBar
LoadCursorA
SetScrollRange
RegisterWindowMessageA
GetDlgItem
GetMenuItemCount
UnhookWindowsHookEx
GetSystemMetrics
DispatchMessageW
IntersectRect
FillRect
SetWindowsHookExA
DestroyMenu
CreatePopupMenu
CallNextHookEx
InsertMenuItemA
PostQuitMessage
CharNextA
SendMessageW
ShowOwnedPopups
PostMessageA
MapVirtualKeyA
ActivateKeyboardLayout
DefWindowProcA
CloseClipboard
GetScrollInfo
DrawIcon
DefFrameProcA
GetWindowRect
WindowFromPoint
RegisterClassA
GetIconInfo
RedrawWindow
TranslateMessage
MessageBoxA
AdjustWindowRectEx
GetMenuItemInfoA
GetDCEx
SetMenu
GetWindow
ShowWindow
GetSysColorBrush
GetCursor
EnumThreadWindows
DrawFrameControl
EndPaint
OemToCharA
SetClassLongA
GetPropA
DispatchMessageA
GetActiveWindow
GetClipboardData
SetCursor
EnumChildWindows
SetPropA
SetForegroundWindow
GetWindowPlacement
DrawAnimatedRects

shell32

SHGetDesktopFolder
SHFileOperationA
SHGetFileInfoA

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5ea15b5851add8df9dee74197eadf9e

Headers

File Characteristics

Imports

version

kernel32

gdi32

user32

shell32

Sections

CODE Size: 29KB - Virtual size: 29KB

.tls Size: 72KB - Virtual size: 72KB

.data Size: 3KB - Virtual size: 2KB

.edata Size: 2KB - Virtual size: 1KB

CODE
Size: 29KB - Virtual size: 29KB

.tls
Size: 72KB - Virtual size: 72KB

.data
Size: 3KB - Virtual size: 2KB

.edata
Size: 2KB - Virtual size: 1KB