74231bc9aab5749318cecd1973662251

Sharing

Copy URL Twitter E-mail

General

Target

74231bc9aab5749318cecd1973662251
Size

167KB
MD5

74231bc9aab5749318cecd1973662251
SHA1

95367e345de2b4cbe2f6cb681928ab6aa1dfc5cb
SHA256

7779f76f5d431a57bd42cf4ec095746dedddbc2af8c0bd9e90dab03186cee894
SHA512

b1c0109dbfddadd7db90276225d57455ba45e7ff117c653bcb8e380cb4b817dadf427c80da319bdcef276c121c8f9774ccf88c746327de08b59d6dd2893fe1c1
SSDEEP

3072:DYmQHMT4KqkjTBo2zsHVHfTTuuvhtWomMlyfElq5Od/LLNO1ps1TR+:EmXoUs1rSuJkomvfInzLkM1TR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74231bc9aab5749318cecd1973662251

Files

74231bc9aab5749318cecd1973662251
.exe windows:4 windows x86 arch:x86

e4d1d68026106d5c284793f49f7d3a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
CreateDIBSection
GetObjectW
GetStockObject
StretchDIBits
RealizePalette
SelectPalette
SelectObject
SetStretchBltMode
CreateCompatibleDC
BitBlt

winmm

mixerGetLineControlsW
timeGetTime
waveInGetDevCapsW
waveInGetNumDevs
mixerOpen
mixerSetControlDetails
mixerClose
mixerGetControlDetailsW
mixerGetLineInfoW
mixerGetNumDevs
timeSetEvent
mixerGetDevCapsW

kernel32

LocalAlloc
CloseHandle
lstrcpynW
GetThreadPriority
PrivCopyFileExW
MultiByteToWideChar
InterlockedDecrement
CreateSemaphoreW
WaitForMultipleObjects
LocalFree
WriteFile
ProcessIdToSessionId
GetCurrentThread
GetThreadLocale
GlobalReAlloc
GetProcessId
GetCurrentThreadId
lstrcmpW
GlobalFree
VirtualFree
CreateEventW
GetSystemInfo
OutputDebugStringW
ResetEvent
GetSystemTimeAsFileTime
CreateThread
VirtualAlloc
QueryPerformanceCounter
InitializeCriticalSection
DuplicateHandle
GlobalUnlock
GlobalLock
EnumResourceTypesA
GetVersionExW
GetCurrentProcess
LoadLibraryW
lstrlenW
ReleaseSemaphore
DisableThreadLibraryCalls
GetTickCount
GetLastError
InterlockedExchange
GetACP
GetProcAddress
SetThreadPriority
Sleep
InterlockedIncrement
SetEvent
FreeLibrary
GetCurrentProcessId
CreateFileW
lstrcmpiW
ExitProcess
GlobalAlloc
GetModuleFileNameW
RaiseException
GetLocaleInfoA
GetModuleHandleW
LeaveCriticalSection
lstrcpyW
GetVersionExA
DeleteCriticalSection
lstrlenA
WaitForSingleObject
EnterCriticalSection
GetModuleFileNameA

user32

ReleaseDC
PeekMessageW
DispatchMessageW
GetWindowRect
IsWindowVisible
PostThreadMessageW
EnableWindow
KillTimer
wsprintfW
GetQueueStatus
GetDC
wvsprintfW
UnregisterClassA
SetParent
UnregisterClassW
RegisterWindowMessageW
SetTimer
TranslateMessage
MsgWaitForMultipleObjects

gdiplus

GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipCreateBitmapFromStream
GdipFree
GdiplusShutdown
GdipGetImageThumbnail
GdiplusStartup
GdipDisposeImage
GdipCloneImage

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4d1d68026106d5c284793f49f7d3a9a

Headers

File Characteristics

Imports

gdi32

winmm

kernel32

user32

gdiplus

Sections

.text Size: 100KB - Virtual size: 100KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 61KB - Virtual size: 60KB

.tls Size: 1024B - Virtual size: 88KB

.text
Size: 100KB - Virtual size: 100KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 61KB - Virtual size: 60KB

.tls
Size: 1024B - Virtual size: 88KB