3b14f060b2cf91e65d5be34a55bdf5b5

Sharing

Copy URL

Twitter E-mail

General

Target

3b14f060b2cf91e65d5be34a55bdf5b5
Size

171KB
MD5

3b14f060b2cf91e65d5be34a55bdf5b5
SHA1

8db48dbc5bcbb604d25c8dfd25491c3db078a3e9
SHA256

93908e6e012bec50d57842b8d4b5be397040faf65aa4395d67cc9a1d965fea18
SHA512

4ebf1479004c84be3c2fbc587b4ab7e4b1f14da6027b5b404293a5088a1ddadffeab0de8c9a121d5541bf09d661e24555076cc8329bc5c139753bd34de72ee2f
SSDEEP

3072:B+2RsMGOToOQYzAhcIwxdmDRYsr0r8wTyq6Q:BTyRkoOQY8hvor8wZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b14f060b2cf91e65d5be34a55bdf5b5

Files

3b14f060b2cf91e65d5be34a55bdf5b5
.exe windows:4 windows x86 arch:x86

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

RegisterWindowMessageA
IsIconic
GetActiveWindow

advapi32

RegCreateKeyA

comctl32

ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Add
ImageList_DrawEx
ImageList_Read
ImageList_Write

kernel32

IsBadReadPtr
LoadLibraryExA
GetProcAddress
GetCommandLineW
VirtualAlloc
ExitThread
GetVersionExA
GetLastError
GetCommandLineA
LoadLibraryA
ExitProcess
GetOEMCP
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES02
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES86
Size: 512B - Virtual size: 391B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES44
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES00
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES72
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES43
Size: 1024B - Virtual size: 757B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES22
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES30
Size: 1024B - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

Imports

user32

advapi32

comctl32

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 140KB - Virtual size: 140KB

RES02 Size: 2KB - Virtual size: 1KB

RES86 Size: 512B - Virtual size: 391B

RES44 Size: 1KB - Virtual size: 1KB

RES00 Size: 1KB - Virtual size: 1KB

RES72 Size: 512B - Virtual size: 203B

RES43 Size: 1024B - Virtual size: 757B

RES22 Size: 512B - Virtual size: 131B

RES30 Size: 1024B - Virtual size: 595B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 140KB - Virtual size: 140KB

RES02
Size: 2KB - Virtual size: 1KB

RES86
Size: 512B - Virtual size: 391B

RES44
Size: 1KB - Virtual size: 1KB

RES00
Size: 1KB - Virtual size: 1KB

RES72
Size: 512B - Virtual size: 203B

RES43
Size: 1024B - Virtual size: 757B

RES22
Size: 512B - Virtual size: 131B

RES30
Size: 1024B - Virtual size: 595B

.rsrc
Size: 2KB - Virtual size: 2KB