4758ee5d712b0a0fc25c97e318b29fe1

Sharing

Copy URL Twitter E-mail

General

Target

4758ee5d712b0a0fc25c97e318b29fe1
Size

95KB
MD5

4758ee5d712b0a0fc25c97e318b29fe1
SHA1

bf785e930d891da1bcdf967b3b13702604e0ff6a
SHA256

f0033dc5f77cb9a38f3bfee65f8c83fa7e7088b016c44d838c1634d4454152ed
SHA512

bd6a04a2077486eeb2ebd1b4fee292cdb24c8ac149703b8942bbbec008300b780242b86ede4c2ecd7e0f42d9f9a703498e2249617da086085d2d5433da062dc6
SSDEEP

1536:AQHc2WbVljfwoJ7vDtrIlOgwg9Y+oe7qODtB48/3kosiyRf:Ap7VljtVD1ZgW+oehrP/kdp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4758ee5d712b0a0fc25c97e318b29fe1

Files

4758ee5d712b0a0fc25c97e318b29fe1
.exe windows:5 windows x86 arch:x86

1129c3f85bea83b83b0e3ba098ed1890

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

malloc
memset

wininet

InternetCloseHandle
InternetOpenA

ole32

CoGetClassObject
CoTaskMemFree
CoGetMalloc
CoTaskMemAlloc

kernel32

ReleaseMutex
HeapAlloc
GetProcessHeap
ExitProcess
HeapFree
WriteFile
OpenProcess
WriteProcessMemory
LoadLibraryA
MoveFileA
WaitForMultipleObjects
CompareStringA
CloseHandle
GetCurrentProcessId
CreateMutexA

user32

InvalidateRect
SetWindowLongA
GetForegroundWindow
ShowCursor
GetWindowLongA
CreateMenu
GetWindowInfo
LoadBitmapA
GetWindowRect
SetCursor
PostMessageA
GetCursor
ModifyMenuA
DrawTextA
GetDC
GetActiveWindow
DestroyWindow
CreateWindowExA
SetWindowTextA
DrawFrameControl
GetWindow
MoveWindow
DrawEdge
ReleaseDC
ShowWindow

gdi32

ExtFloodFill
DrawEscape
DeleteDC
InvertRgn
CreateFontIndirectA
BeginPath
ExtCreatePen
GetPath
CreateDIBPatternBrush
SelectObject
PolyDraw
CreateCompatibleDC
CreateCompatibleBitmap
ExtCreateRegion
EndPath
PathToRegion
ExtTextOutA
GetBitmapBits
SetBitmapBits
CreateFontIndirectW
StretchBlt
CreateBitmap
CreateDCA
DeleteObject

Exports

Exports

_IFoundSecret@12
_ITestThisProc@16

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1129c3f85bea83b83b0e3ba098ed1890

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

wininet

ole32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.cdata Size: 512B - Virtual size: 4B

.rsrc Size: 84KB - Virtual size: 84KB

.reloc Size: 512B - Virtual size: 374B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.cdata
Size: 512B - Virtual size: 4B

.rsrc
Size: 84KB - Virtual size: 84KB

.reloc
Size: 512B - Virtual size: 374B