e52e00daa2e484a574af75bf1d99da708deed437c3df3e2fe9dd77ff35f91328

Sharing

Copy URL Twitter E-mail

General

Target

e52e00daa2e484a574af75bf1d99da708deed437c3df3e2fe9dd77ff35f91328
Size

46KB
MD5

2f32d3a71b584ef895ed5ed1230fce50
SHA1

4ab3c6e4d0101c838b74d9f14e7e5b29d208c794
SHA256

e52e00daa2e484a574af75bf1d99da708deed437c3df3e2fe9dd77ff35f91328
SHA512

66e57e6f9c6b5d17d7acd7b69f65a7bd4c33ff63da7db341e5bf3df4777e5c5ac409087fabd2ca10797ce1f6fc6cac44331bfec2dd57adb48158ee1ca06e2b17
SSDEEP

768:TppnF5/ija+1IORN+3wYajHVCI+u8pYot9qZDEwX98Ug62Nv8d4Gsl7qm708x:TpJW4acI+YZy6ctl7qm9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e52e00daa2e484a574af75bf1d99da708deed437c3df3e2fe9dd77ff35f91328

Files

e52e00daa2e484a574af75bf1d99da708deed437c3df3e2fe9dd77ff35f91328
.dll windows:4 windows x86 arch:x86

80e005e18b8823b0a06220a6b82a2984

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
SetForegroundWindow
PostMessageA
MessageBoxA
LoadStringA
IsWindowVisible
IsIconic
GetWindowThreadProcessId
GetWindowLongA
GetSystemMetrics
GetForegroundWindow
GetDesktopWindow
EnumWindows
CharNextA
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WideCharToMultiByte
VirtualQuery
VirtualProtect
OpenFileMappingA
MapViewOfFile
LoadLibraryA
GetVersionExA
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetDiskFreeSpaceA
GetCurrentProcessId
GetCPInfo
FreeLibrary
EnumCalendarInfoA
CreateThread
CreateFileMappingA
Sleep

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80e005e18b8823b0a06220a6b82a2984

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.itext Size: 512B - Virtual size: 352B

.data Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 18KB

.idata Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 31KB

.itext
Size: 512B - Virtual size: 352B

.data
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 18KB

.idata
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 4KB