5013c0656cbc084c741368cf437faaf7

General

Target

5013c0656cbc084c741368cf437faaf7
Size

18KB
MD5

5013c0656cbc084c741368cf437faaf7
SHA1

fb95fc982e9fa088175b0cd63f56089d22936164
SHA256

2fef7630ba6914ca11b39806cf4a0fc8cbc12165a2009c4b4c22b316843c322c
SHA512

3120654da8bbc7210a6c984855ecc91a6fd80a9acca35e9b2fdbd0526187a0033490f0c93eadda799ee5bcc565ed4ca55c2869d8060f043d4d6294a7d7ca827c
SSDEEP

384:AaL7KMTDPmBdXu4rwZLAtcWfxPO32NOY+XkvIS0FpW:jKMTDPG+4rwZAy4/OLXkr0F0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5013c0656cbc084c741368cf437faaf7

Files

5013c0656cbc084c741368cf437faaf7
.dll windows:4 windows x86 arch:x86

3386d9b40f84e4ba6f1e1b4e29a0bdf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalUnlock
CloseHandle
ReadFile
GlobalLock
GlobalAlloc
GetFileSize
CreateFileA
RaiseException
InitializeCriticalSection
IsBadReadPtr
GetPrivateProfileStringA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GlobalFree
ReadProcessMemory
WriteProcessMemory
GetComputerNameA
TerminateThread
SetUnhandledExceptionFilter
GetCurrentThread
SetThreadContext
Sleep
GetCurrentProcess
VirtualProtectEx
GetModuleFileNameA
CreateThread
GetCurrentProcessId
OpenMutexA
LoadLibraryA
CreateMutexA

user32

FindWindowA
GetWindowThreadProcessId
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowTextA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx

msvcrt

_strlwr
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strnicmp
strcat
sprintf
strcpy
strrchr
strlen
strncpy
strchr
memcpy
memset
strstr
wcslen
??2@YAPAXI@Z

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3386d9b40f84e4ba6f1e1b4e29a0bdf7

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

wininet

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 2KB

sdt Size: 512B - Virtual size: 80B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 2KB

sdt
Size: 512B - Virtual size: 80B

.reloc
Size: 2KB - Virtual size: 1KB