87de9a429db5d7dab2338d73288fdb2f

Sharing

Copy URL Twitter E-mail

General

Target

87de9a429db5d7dab2338d73288fdb2f
Size

55KB
MD5

87de9a429db5d7dab2338d73288fdb2f
SHA1

6933f06ce52bb443614d5443cd39a10361e3f421
SHA256

40f3adc77d2c472e5576d936fcac387cf1950e98cccfcd89fb8aa24f0f035847
SHA512

cc1bbfc23a8a2433667cab521ebfd243ab317e99392f8ce51b2bade6af15878915315828d780fef0a84f8cf4a36291ef04c0560b193796a6d265dcbdd2791f85
SSDEEP

768:2vlXrf4xRPEcqdx3RFoa0Dv4RSclGIRFPAUANSo3O+rT26xodWc+eF:WFrw1qDRtK4FPAUSfV2PCeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87de9a429db5d7dab2338d73288fdb2f

Files

87de9a429db5d7dab2338d73288fdb2f
.dll windows:5 windows x86 arch:x86

fd827664f460f880fa62e8ae5bdd5e71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Y:\mftsnj\bYEqr\mysvvIv\xtyvIr\oHZyf.pdb

Imports

kernel32

SetSystemTime
GetSystemTimeAsFileTime
IsBadReadPtr
GetFileInformationByHandle
SetFilePointer
VerifyVersionInfoW
lstrcatW
EnumResourceTypesA
CreateNamedPipeA
IsValidLanguageGroup
RemoveDirectoryA
InterlockedExchangeAdd
SetEvent
SuspendThread

comdlg32

ChooseColorW
ReplaceTextW

gdi32

PatBlt
BeginPath
TextOutA
CreateRoundRectRgn
CreateBitmap
CreateFontW
CreatePolygonRgn

shlwapi

PathGetArgsW

user32

AdjustWindowRect
GetWindowRect
GetClientRect
ClientToScreen
ChildWindowFromPointEx
SendDlgItemMessageW
FindWindowA
SetUserObjectInformationW
wsprintfW
CharPrevW
DestroyCursor
GetForegroundWindow
GetClassLongW
CloseDesktop

Exports

Exports

?goObyxpEipjzhmyWIvn@@YGPAGPAE@Z
?zHrWwgvyOvO@@YGPADPAN@Z
?lVyxtVvuAilnV@@YGFDPAD@Z
?nuuewmabOmrDgJokBqUHz@@YGJPAK@Z
?whLvwkxfoh@@YGHPANE@Z
?njdnHGsnrBJluoYfne@@YGXPAEPAE@Z
?IUjgzaecwikl@@YGFPAEPAD@Z

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd827664f460f880fa62e8ae5bdd5e71

Headers

File Characteristics

PDB Paths

Imports

kernel32

comdlg32

gdi32

shlwapi

user32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.itext Size: 1024B - Virtual size: 684B

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 196KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.itext
Size: 1024B - Virtual size: 684B

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 196KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 2KB - Virtual size: 1KB