257ac262d8598b17621cdf26a48ec886

Sharing

Copy URL Twitter E-mail

General

Target

257ac262d8598b17621cdf26a48ec886
Size

78KB
MD5

257ac262d8598b17621cdf26a48ec886
SHA1

0d9a09377642d5b8c304cbee2da9f82188754508
SHA256

c6ec0a4eaa196598068ac41953e2d9058b72ca115ddace65d1a1a58da16f965b
SHA512

c8ad373f8aa525d9c75c58686d732c71cf3cd59e56f613e7954ce85cf0857add1bc9c0064bb57d0b84381cdc2414c415a76b26a31d24a65adef73d0e397e535f
SSDEEP

1536:Ujg+5yK/jOLCO8pYXzoqIzTd4Z0ipH0RIJJroVG+AywOsUjvSoSTbWcdkFVniARq:UjtljOl8pYIzTC0GJJroVG7yR+lbRC34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257ac262d8598b17621cdf26a48ec886

Files

257ac262d8598b17621cdf26a48ec886
.exe windows:4 windows x86 arch:x86

e6d5cd72cd787fec5d098f4a1038c4d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VerLanguageNameA
ExitProcess
GetEnvironmentVariableA
LoadLibraryA
VirtualAlloc
GetModuleHandleA
GetLastError
GetProcAddress
GetSystemWindowsDirectoryW
FindResourceW
AssignProcessToJobObject
OpenFileMappingA
SystemTimeToTzSpecificLocalTime
VirtualProtect
CreateFileA
MapViewOfFileEx
GetModuleHandleW
OpenProfileUserMapping
GlobalHandle

msvcrt

_memicmp
memset
__iscsymf
sin
_atoldbl
fputs
memcpy
is_wctype
_ismbbalnum
_adj_fdivr_m64
ispunct
__p__pgmptr
strtok
_CxxThrowException
tolower
_spawnvpe
_rmtmp
_CItanh
isupper
isalnum
isspace
_mbsdup
_CIasin
wcsncpy
_chsize
??0exception@@QAE@ABQBD@Z

user32

UpdateWindow
ModifyMenuW
LoadStringW
LoadStringA
SetDlgItemTextW
UnregisterClassA
LoadAcceleratorsW
EnableWindow
PrivateExtractIconsW
CloseClipboard

opengl32

glTexCoord2fv
glStencilFunc
glVertex4s
glCopyTexImage2D
glTexEnvf
wglSwapLayerBuffers
glGetTexGendv
glGetTexEnviv
glGetMapiv
glEnable
glGetTexLevelParameteriv
glMatrixMode
glRasterPos3s

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.crt
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.media
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6d5cd72cd787fec5d098f4a1038c4d5

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

opengl32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 2KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.crt Size: 1024B - Virtual size: 537B

.tls Size: 512B - Virtual size: 22B

.media Size: 512B - Virtual size: 69B

.data Size: 1024B - Virtual size: 876B

.rsrc Size: 35KB - Virtual size: 34KB

.reloc Size: 512B - Virtual size: 116B

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 2KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.crt
Size: 1024B - Virtual size: 537B

.tls
Size: 512B - Virtual size: 22B

.media
Size: 512B - Virtual size: 69B

.data
Size: 1024B - Virtual size: 876B

.rsrc
Size: 35KB - Virtual size: 34KB

.reloc
Size: 512B - Virtual size: 116B