64b0440e92c8159fe93c6867187218cc

General

Target

64b0440e92c8159fe93c6867187218cc
Size

143KB
MD5

64b0440e92c8159fe93c6867187218cc
SHA1

61a5ab6ce9fdce8cd9a55923ef6e040e82b214d6
SHA256

0f61145a0231c616536f9790aa8409581e6216e743e5a44b48dbf1cf6eb82b81
SHA512

14f6907cadae44a0bcac05d1d87f639a2efd1e240e5df2f4c6161d37e5791b3c9c43cceaa4592499354435aced9a39a672aacb76e7fa8a303592bbde3afe56c8
SSDEEP

1536:C2Ta/aO9y8qMAAjAT1Iw8Ds9SEMgEG75DrOIWAhc70TZ+ww3f7uC2ACdR4:9a99cJt4s4E8IWAhc7wZ9Uf7uC29R4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b0440e92c8159fe93c6867187218cc

Files

64b0440e92c8159fe93c6867187218cc
.exe windows:4 windows x86 arch:x86

c73b3353d4009797874a2534293ae22f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetWindowsDirectoryA
lstrcmpiW
GetProcessHeap
lstrcmpiA
GetModuleHandleW
GlobalFindAtomW
GetThreadLocale
GetTickCount
DeleteFileA
GetUserDefaultLangID
GetCommandLineW
GlobalFindAtomA
GetCommandLineA
CopyFileA
GetACP
GetCurrentProcessId
SetCurrentDirectoryA
QueryPerformanceCounter
GetStartupInfoA
lstrlenW
GetCurrentThread
lstrlenA
GetOEMCP
MulDiv
lstrcmpA
DeleteFileW
GetCurrentProcess
RemoveDirectoryA
GetConsoleOutputCP
GetVersion
VirtualAlloc
VirtualFree
IsDebuggerPresent
GetCurrentThreadId
RemoveDirectoryW
GetDriveTypeA

gdi32

GetDeviceCaps
CreateCompatibleDC
SetTextAlign
GetClipBox
CreatePalette
SelectPalette
GetStockObject
DeleteObject
CreatePen
CreateSolidBrush
CreateFontIndirectA
SetStretchBltMode
SetMapMode
SetTextColor
GetTextMetricsA
GetObjectA
SaveDC
RestoreDC
GetPixel
DeleteDC
SelectObject
LineTo
PatBlt
RectVisible
SetPixel

user32

TranslateMessage
CharNextA
GetSystemMetrics
GetParent
GetDesktopWindow

glu32

gluQuadricCallback

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c73b3353d4009797874a2534293ae22f

Headers

File Characteristics

Imports

kernel32

gdi32

user32

glu32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 43KB - Virtual size: 71KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 43KB - Virtual size: 71KB