70e015d0dd41ead690d431b5e148c18a

General

Target

70e015d0dd41ead690d431b5e148c18a
Size

20KB
MD5

70e015d0dd41ead690d431b5e148c18a
SHA1

cbb924b1a41d698c99ffffe5c79bbef9adfcf779
SHA256

f2475f04e215756e29019af342cddd817147209d1322af6be42895b8e7770e5b
SHA512

a4426077208948c5650215467ce0e9dece9879f5780427b77784e2782c896dd6dd1c6609e11495138b4cfac2393855c0fbba262ce8e65c080b69c496cbdd9b09
SSDEEP

384:FJiGNGQ4yVZn9nsHO3/ou4RP6jX8e2lZpKqX:WGNG7c9nsu2d6j52lZpKqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70e015d0dd41ead690d431b5e148c18a

Files

70e015d0dd41ead690d431b5e148c18a
.dll windows:4 windows x86 arch:x86

c71080a61155965e2d4d7a5a243276c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentProcessId
ReadProcessMemory
GetCurrentProcess
IsBadReadPtr
GetProcAddress
GetModuleHandleA
WriteProcessMemory
TerminateThread
GlobalUnlock
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
CreateRemoteThread
GlobalFree
VirtualAllocEx
OpenProcess
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
VirtualProtectEx
SetThreadPriority
VirtualAlloc
VirtualFree
WinExec
GetTempPathA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
VirtualFreeEx
CloseHandle

user32

GetInputState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
GetWindowThreadProcessId
FindWindowA
PostThreadMessageA
GetWindowTextA
GetMessageA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA

urlmon

URLDownloadToFileA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c71080a61155965e2d4d7a5a243276c4

Headers

File Characteristics

Imports

kernel32

user32

wininet

urlmon

advapi32

Sections

.text Size: 17KB - Virtual size: 16KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB