439f08ed0061012bbe9dbfb6476c7487

Sharing

Copy URL Twitter E-mail

General

Target

439f08ed0061012bbe9dbfb6476c7487
Size

45KB
MD5

439f08ed0061012bbe9dbfb6476c7487
SHA1

61e6c71647ff777adf11dae27ae0ea3a3263595f
SHA256

4cd47de8b7938a1356e2a6f0667b245b0a858ad4440230447d414960be5e4c12
SHA512

0df9b76f85d2ec9b31cfaa108506f9e227567bdce35fbdda948eb09667162b18b6619124fd84170cef98164cb4a99f95aca15bad6774d2c7a3af663f68b50c87
SSDEEP

768:V894C4AVu1uP2hTMfKZuxa6HkCZ2r9IAgl7SA2sGYn62mUlS42hRIhRA:VIL9P2kKx6HkCZk9IPlPhZ625m7I7A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439f08ed0061012bbe9dbfb6476c7487

Files

439f08ed0061012bbe9dbfb6476c7487
.exe windows:4 windows x86 arch:x86

de15f765439b285047ac8baa432fb11d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputCharacterW
VirtualProtect
Heap32ListNext
GetPrivateProfileSectionW
GetVolumeInformationW
CreateRemoteThread
EnumResourceNamesA
GetProfileIntW
GetPrivateProfileStringA
GlobalLock
_lwrite
SetTapeParameters
GetLastError
WriteConsoleOutputCharacterW
SetCurrentDirectoryA
GetCommandLineW
SetConsoleMaximumWindowSize
SetComputerNameW
WriteTapemark
ExpungeConsoleCommandHistoryW
TlsFree
BindIoCompletionCallback
CreateThread
SetProcessAffinityMask
HeapReAlloc
WaitForMultipleObjectsEx
CreateJobObjectA
CreateIoCompletionPort
GetCurrentProcess
SetDefaultCommConfigA
LoadLibraryExA
SetConsoleWindowInfo

user32

DestroyMenu
InitializeLpkHooks
MessageBoxExA
keybd_event
SetWindowLongW
DdeCreateStringHandleW
DdeCmpStringHandles
SetPropA
GetWindow
IsWindow
SetDlgItemTextA
BeginPaint
SetWindowPlacement
PostMessageW
RealGetWindowClassW
DlgDirSelectExA
UnregisterClassW
MonitorFromRect
DrawAnimatedRects
InsertMenuA
DdeGetLastError
GetPropW
DialogBoxIndirectParamAorW
EnumPropsExW
VkKeyScanExW
GetWindowRgn
ShowCursor
DeviceEventWorker
SetUserObjectInformationW
GetThreadDesktop

gdi32

GetTextAlign
MoveToEx
SetColorSpace
CreateBitmapIndirect
PATHOBJ_bEnum
CombineTransform
GetCharABCWidthsI
GetEnhMetaFileDescriptionA
GdiEntry6
CreatePolyPolygonRgn
SelectBrushLocal
QueryFontAssocStatus
GetGlyphIndicesW
SetDIBColorTable
GdiConvertToDevmodeW
AddFontMemResourceEx
GetTextExtentExPointI
GdiEntry3
EngLoadModule
GetDIBColorTable
GetKerningPairs
CreateFontIndirectA

comdlg32

Ssync_ANSI_UNICODE_Struct_For_WOW
PageSetupDlgA
CommDlgExtendedError
GetOpenFileNameW
PrintDlgExW
ChooseFontA
FindTextW
ReplaceTextA
GetFileTitleW
dwLBSubclass

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

de15f765439b285047ac8baa432fb11d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 40KB

.data Size: 37KB - Virtual size: 40KB

.idata Size: 3KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 40KB

.data
Size: 37KB - Virtual size: 40KB

.idata
Size: 3KB - Virtual size: 4KB