248b17df395ce1c861ecb2ad32dedabc

Sharing

Copy URL Twitter E-mail

General

Target

248b17df395ce1c861ecb2ad32dedabc
Size

110KB
MD5

248b17df395ce1c861ecb2ad32dedabc
SHA1

7749dd3508d9a32a2157324fb9c743f8b9a6f740
SHA256

a9de7e1396ddc01dc1733a11ee6cd8b24bf267a20efc87c765a6cf7af7e38d16
SHA512

574b7abf1183a846892aac907c23080f4f7c29169fd4d310a176f1178872af66e1cf3f0059f354ff5678ad185e86ab95187623735e4e9276eff80531f9c3169b
SSDEEP

1536:nWv6wmaHf9n3Mj6oxZVe5lEVX1MA43uGT2qbDbsm4+T4mZ:Y6wmaHf9n325svEsA4eIfbsp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
248b17df395ce1c861ecb2ad32dedabc

Files

248b17df395ce1c861ecb2ad32dedabc
.exe windows:4 windows x86 arch:x86

16935d52908531b91406a3f0be332137

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

DrawTextA
GetWindowTextLengthA
IsMenu
CloseWindow
CopyImage
LoadCursorA
CopyIcon
GetDlgItem
DialogBoxParamA
EndDialog
CreateIcon
GetWindowTextA
GetMenu
GetCursor
DialogBoxParamW

kernel32

GetFileSize
ReadConsoleA
GetFileTime
DeleteFileW
GetStdHandle
WriteFile
GetConsoleMode
GetCPInfo
GetComputerNameA
OpenFile
Sleep
ExitThread
DeleteAtom
ReadFile
OpenFileMappingA
SetLastError
CreateThread
DeleteFileA
GetLastError
FindAtomA
FindFirstFileA
GetCommandLineA
GlobalFree
CreateProcessA

advapi32

RegEnumKeyW
RegOpenKeyA
RegEnumValueW
RegEnumKeyA
RegQueryValueExA
RegDeleteValueW
RegOpenKeyExW
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExW

comctl32

CreateToolbarEx
DllGetVersion
ImageList_Destroy
MenuHelp
ImageList_Add
DrawStatusTextW
CreateMappedBitmap
CreateToolbar
ImageList_Copy
ImageList_AddIcon
CreateStatusWindow
CreateUpDownControl

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 58KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 196B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16935d52908531b91406a3f0be332137

Headers

File Characteristics

Imports

user32

kernel32

advapi32

comctl32

Sections

.text Size: 44KB - Virtual size: 44KB

.data Size: 60KB - Virtual size: 60KB

.bbs Size: - Virtual size: 58KB

.idata Size: 2KB - Virtual size: 1KB

.tls Size: - Virtual size: 196B

.rdata Size: 512B - Virtual size: 257B

.rsrc Size: 1024B - Virtual size: 516B

.text
Size: 44KB - Virtual size: 44KB

.data
Size: 60KB - Virtual size: 60KB

.bbs
Size: - Virtual size: 58KB

.idata
Size: 2KB - Virtual size: 1KB

.tls
Size: - Virtual size: 196B

.rdata
Size: 512B - Virtual size: 257B

.rsrc
Size: 1024B - Virtual size: 516B