87e0de78e5574eec1620ea7962b44089

Sharing

Copy URL Twitter E-mail

General

Target

87e0de78e5574eec1620ea7962b44089
Size

122KB
MD5

87e0de78e5574eec1620ea7962b44089
SHA1

5f57ff760e9bafca1be5d33af6f992a815d13695
SHA256

46c84d4bdb3a7aaa82f3cd4e43208dd78bf9578dd62de1d4dd0f9caa76e358b3
SHA512

f9ef3cb42dea1f59f0d2a1466b7a2b251512b92309f29d8abc049fc76e17e588570ee5b27da13b7171196c32a1474ca685b4f89102f70e8840bda9f4cae04c3b
SSDEEP

1536:QLGNn+VSNhF1IVaJIb9ReZMoKm0E3hlUwZNGlvptovx761ceWdRXh:QzSNhzLJIb+2oK9E3ZavptovBLXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87e0de78e5574eec1620ea7962b44089

Files

87e0de78e5574eec1620ea7962b44089
.exe windows:4 windows x86 arch:x86

c05154497c5f155889f6f5ac0f0fb48e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetCommandLineA
GetModuleFileNameA
WinExec
LoadLibraryA
GetProcAddress
FindNextFileA
GetTickCount
FindFirstFileA
GetLocalTime
FindClose
DeleteFileA
GlobalFree
SetEndOfFile
GetOEMCP
SetStdHandle
RtlUnwind
FlushFileBuffers
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetFileType
FreeEnvironmentStringsA
SetHandleCount
LCMapStringW
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCurrentProcess
TerminateProcess
SetFilePointer
CloseHandle
ReadFile
WriteFile
VirtualAlloc
VirtualFree
HeapDestroy
ExitProcess
HeapCreate
GetStartupInfoA
GetModuleHandleA
GetVersion
CreateDirectoryA
GlobalAlloc
GetWindowsDirectoryA
HeapReAlloc
SetEnvironmentVariableA
GetLastError
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
HeapAlloc
HeapFree
CreateFileA
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
SetCurrentDirectoryA

user32

GetMenu
GetDC
SetActiveWindow
ShowWindow
CreateWindowExA
ReleaseDC
SetWindowTextA
GetWindowRect
MoveWindow
EndPaint
BeginPaint
SetCursor
LoadCursorA
FillRect
GetSystemMetrics
GetCursorPos
ChangeDisplaySettingsA
EnumDisplaySettingsA
DestroyWindow
GetDlgCtrlID
IsDlgButtonChecked
GetDlgItemTextA
ShowCursor
GetFocus
SetCursorPos
MessageBoxA
GetAsyncKeyState
ScrollWindow
SetScrollRange
ShowScrollBar
InvalidateRect
SetScrollPos
PostQuitMessage
GetSystemMenu
DefWindowProcA
FindWindowA
TranslateMessage
AppendMenuA
PeekMessageA
GetMessageA
DispatchMessageA
KillTimer
GetActiveWindow
SetTimer
UpdateWindow
WINNLSEnableIME
LoadIconA
RegisterClassA
SendMessageA
SetFocus
SetWindowPos

gdi32

TextOutA
GetTextExtentPointA
SetStretchBltMode
DeleteObject
StretchBlt
GetTextMetricsA
CreateFontIndirectA
SelectObject
CreateSolidBrush
SetTextColor
CreatePen
CreatePalette
SetDIBColorTable
SetBkMode
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
MoveToEx
LineTo
SetPixel
GetPixel
SelectPalette
StretchDIBits
GetStockObject
Rectangle
RealizePalette
BitBlt
DeleteDC

comdlg32

ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

shell32

ShellExecuteA

winmm

sndPlaySoundA
mciSendStringA

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c05154497c5f155889f6f5ac0f0fb48e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

winmm

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 19KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 19KB

.rsrc
Size: 4KB - Virtual size: 4KB