29752364e71f240caab62a5cf428efcb

Sharing

Copy URL

Twitter E-mail

General

Target

29752364e71f240caab62a5cf428efcb
Size

141KB
MD5

29752364e71f240caab62a5cf428efcb
SHA1

3a9b213ced3181dae5b506c69385ac213383d9e2
SHA256

dd945f85f7999dcf4cba3dd36dce679664c5f62a452defd30289a9709de99690
SHA512

76b07af0e11612fff33370c007be6930d6b3e500fc26184e72e5cc6cae4d57b32e751123dd0ea9c197b34b6cf3a45fe958086df34e03f911cf806f481dfa8112
SSDEEP

3072:rSoNxgtaIbJG0FDPtdv9slY0DdFQtIzJMDwqmPp32HNyk:rSoz0aeNV/FJy1JMDw7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29752364e71f240caab62a5cf428efcb

Files

29752364e71f240caab62a5cf428efcb
.exe windows:5 windows x86 arch:x86

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentDirectoryA
VirtualAlloc
GetLastError
lstrcpynA
OutputDebugStringA
TerminateThread
LoadLibraryW
GetStartupInfoW
VirtualFree
CreateFiberEx
GetACP
SetEvent
GetConsoleMode
GetModuleFileNameW
SetHandleCount
GetEnvironmentStringsW
GetThreadLocale
GetStdHandle
CloseHandle
GetModuleHandleA
GetCurrentProcess
ExitThread
GlobalAlloc
EndUpdateResourceA
GetProcAddress
lstrcpyW
FreeEnvironmentStringsA
DosDateTimeToFileTime
GetTimeFormatW
VirtualProtect
CreateFiber
FileTimeToSystemTime
GetFileAttributesA

msvcrt

wcstok
atoi
memset
toupper
printf
_wtoi
wcsrchr
wcsncpy
memcpy
strncpy
wcstol
_wcsnicmp
_wcmdln
towupper
_XcptFilter
__CxxFrameHandler
wcscmp
_wcsicmp
swscanf
tmpnam
__setusermatherr

user32

ReleaseDC
RegisterClassA
wsprintfW
GetCursorPos
DestroyWindow
LoadCursorA
DispatchMessageW
SetScrollPos
IsWindow
MapWindowPoints
LoadImageW
SendMessageA
DialogBoxParamA
GetMenuItemCount
CheckDlgButton
GetParent
ClientToScreen
BeginPaint
SendMessageW
GetProcessWindowStation
UnregisterClassW
CopyRect
LoadCursorW
LoadMenuW
SetCapture
ScreenToClient
ReleaseCapture

gdi32

CreateBitmap
CreateFontIndirectW
TranslateCharsetInfo
SetTextColor
CreateCompatibleDC
StretchBlt
SetBkMode
RestoreDC
Rectangle
PatBlt

opengl32

glColor4f
glTexCoord2dv
glFogfv
GlmfBeginGlsBlock
glColor4i
wglShareLists
glColor3ui
glStencilMask
glColor4d
glTexCoord2d

Exports

Exports

VilJlhuQpanqTzh
YaNgetjMbklbzIawgzWns
AeKzzenVyzzq

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.crt Size: 512B - Virtual size: 72B

.rdata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 512B - Virtual size: 262B

.text
Size: 13KB - Virtual size: 13KB

.crt
Size: 512B - Virtual size: 72B

.rdata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 512B - Virtual size: 262B