3ac186d86bf1e9ee0ed73ba60baae8cc

Sharing

Copy URL Twitter E-mail

General

Target

3ac186d86bf1e9ee0ed73ba60baae8cc
Size

184KB
MD5

3ac186d86bf1e9ee0ed73ba60baae8cc
SHA1

26a02f8e3bd298cdaee9e9aa734490d1aa031d8c
SHA256

e72fb3ee45f759be19226bef2a44e9486a0ccc1af1492340cb37f73e46a126c1
SHA512

dd3a107075982e73dca97630c894696e2101856e95e8c6c1744753d45e8608001b57ef1112052d5555e0ce24e7c55547fc603fc6a52dd235c8d7084637a37ec2
SSDEEP

3072:yYkQQbji1am6prn3Y+dRWCMl2uwSTe1HHnyXRr5wh/CEuo:gJrn7vWCMPTexrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac186d86bf1e9ee0ed73ba60baae8cc

Files

3ac186d86bf1e9ee0ed73ba60baae8cc
.exe windows:5 windows x86 arch:x86

330eb2757a53ef28b448ffa53c7082cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
TranslateMessage
GetParent
GetDesktopWindow
GetDC
GetSystemMetrics

kernel32

lstrcmpiA
CopyFileA
IsDebuggerPresent
lstrlenW
GetProcessHeap
GetModuleHandleA
GetCurrentProcess
lstrcmpA
GetCommandLineW
lstrlenA
GetDriveTypeA
GetACP
GetTickCount
RemoveDirectoryA
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoA
SetCurrentDirectoryA
lstrcmpiW
GetVersion
GetCurrentProcessId
GetThreadLocale
DeleteFileW
GlobalFindAtomW
DeleteFileA
GlobalFindAtomA
MulDiv
GetUserDefaultLangID
GetCurrentThread
QueryPerformanceCounter
GetConsoleOutputCP
GetWindowsDirectoryA
VirtualAlloc
GetCommandLineA
VirtualFree

gdi32

LineTo
GetTextMetricsA
SetMapMode
GetDeviceCaps
SelectObject
DeleteObject
PatBlt
RectVisible
CreateFontIndirectA
GetPixel
GetObjectA
CreatePalette
SetTextColor
SetStretchBltMode
CreateSolidBrush
GetClipBox
SaveDC
CreateCompatibleDC
SelectPalette
CreatePen
DeleteDC
RestoreDC
SetTextAlign
GetStockObject

glu32

gluNurbsCallback

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Edmiebnj
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Ckdw, Ps
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

330eb2757a53ef28b448ffa53c7082cb

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 10KB - Virtual size: 9KB

Edmiebnj Size: 512B - Virtual size: 4KB

.rdata Size: 25KB - Virtual size: 24KB

Ckdw, Ps Size: 512B - Virtual size: 4KB

.data Size: 101KB - Virtual size: 101KB

.rsrc Size: 45KB - Virtual size: 47KB

.text
Size: 10KB - Virtual size: 9KB

Edmiebnj
Size: 512B - Virtual size: 4KB

.rdata
Size: 25KB - Virtual size: 24KB

Ckdw, Ps
Size: 512B - Virtual size: 4KB

.data
Size: 101KB - Virtual size: 101KB

.rsrc
Size: 45KB - Virtual size: 47KB