2be0e8e16f6854a32d1808f413dc1196

Sharing

Copy URL Twitter E-mail

General

Target

2be0e8e16f6854a32d1808f413dc1196
Size

273KB
MD5

2be0e8e16f6854a32d1808f413dc1196
SHA1

18988b2cd149b0585ca8330559fc1482dc8799f4
SHA256

d00c2cdc862add57118965c8a2a866403c359b0270da318c96803f828842958b
SHA512

9a38e292f59d6d8cc3d9e4f4d1dc9c672326c2a8fa75bf52ada4d7142e173c9539be5cbe7a911ac7cdca4d3204b4bbef4174c382607affb1820689a8b38c50fe
SSDEEP

6144:ukUzClZteM0+lsQpbLBJeuKAXeKKpq4793GkQ:uhz8PeM0+lsQphJeuZXtKR9Wk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be0e8e16f6854a32d1808f413dc1196

Files

2be0e8e16f6854a32d1808f413dc1196
.exe windows:4 windows x86 arch:x86

cd261dffaf859f85fbf1d2f385bcb1cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

PrintDlgA
LoadAlterBitmap

wininet

CommitUrlCacheEntryW
FindFirstUrlCacheEntryA

gdi32

Ellipse
CreatePatternBrush
GetEnhMetaFileDescriptionW
StartDocA
GetTextExtentPointA
PolyTextOutA

shell32

ExtractAssociatedIconExW
SHGetPathFromIDListA
SHBrowseForFolderW
SHAddToRecentDocs

kernel32

HeapFree
HeapDestroy
GetStartupInfoA
GetTimeZoneInformation
GetLocaleInfoW
GetCurrentThreadId
WideCharToMultiByte
VirtualQuery
TlsGetValue
GetDateFormatA
GetSystemTimeAsFileTime
InterlockedDecrement
LoadLibraryA
GetCommandLineA
WriteFile
HeapReAlloc
VirtualFree
GetStartupInfoW
HeapSize
HeapAlloc
IsValidCodePage
TerminateProcess
LoadLibraryExA
GetProcAddress
CompareStringA
GetCurrentThread
MultiByteToWideChar
GetVersionExA
LeaveCriticalSection
SetLastError
FreeLibrary
GetLastError
GetOEMCP
TlsFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
SetHandleCount
GetFileType
GetStringTypeA
FindResourceExA
EnterCriticalSection
SetThreadPriority
InterlockedExchange
IsValidLocale
HeapCreate
GetCurrentProcess
DeleteCriticalSection
SetConsoleCtrlHandler
GetTimeFormatA
RtlUnwind
GetEnvironmentStrings
QueryPerformanceCounter
VirtualAlloc
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetLocaleInfoA
LCMapStringW
GetProcessHeap
GetModuleFileNameW
ExitProcess
Sleep
AddAtomW
GlobalAddAtomA
TlsSetValue
GetCommandLineW
WaitForMultipleObjectsEx
GetStringTypeW
InitializeCriticalSection
InterlockedIncrement
GetCPInfo
LCMapStringA
TlsAlloc
EnumSystemLocalesA
GetUserDefaultLCID
GetCurrentProcessId
CompareStringW
IsDebuggerPresent
SetEnvironmentVariableA
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
LocalSize
UnhandledExceptionFilter
GetTickCount

user32

BroadcastSystemMessage

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd261dffaf859f85fbf1d2f385bcb1cb

Headers

File Characteristics

Imports

comdlg32

wininet

gdi32

shell32

kernel32

user32

Sections

.text Size: 129KB - Virtual size: 129KB

.data Size: 139KB - Virtual size: 139KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 129KB - Virtual size: 129KB

.data
Size: 139KB - Virtual size: 139KB

.rsrc
Size: 3KB - Virtual size: 2KB