871f698ba10e33fef5fdccf1f0ff5400

Sharing

Copy URL

Twitter E-mail

General

Target

871f698ba10e33fef5fdccf1f0ff5400
Size

80KB
MD5

871f698ba10e33fef5fdccf1f0ff5400
SHA1

cc9ce55e6327831ea8baa77f82df857c09ec24f8
SHA256

5ed2ebe4157a1fc919bcbaf933a1f75571c72966c4e0e31caa56230137c46fe7
SHA512

55f0c1f4e6143a1170dbce9f09604bcf2088540492dafd2727859e367b98fbc151f716fb3b0e8ff2f337dcd035742d939c2c0d4076bb46e60c802be4e613e4a6
SSDEEP

1536:bk7EtqKjwWHkC81t8NvhPam9uyr9eRimGoK+qehWvPsPMk:QdKjwWHkuFamQyr9MGobgP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
871f698ba10e33fef5fdccf1f0ff5400

Files

871f698ba10e33fef5fdccf1f0ff5400
.exe windows:4 windows x86 arch:x86

e14dee58380e15ebcc48c761db6b4c50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPagesScatter
FindNextVolumeW
GetCurrentDirectoryA
GetLastError
FoldStringA
GetOverlappedResult
WritePrivateProfileSectionA
CopyFileExA
HeapCreate
AssignProcessToJobObject
OutputDebugStringA
GetFileInformationByHandle
DeleteCriticalSection
VerSetConditionMask
GetTimeFormatW
MapViewOfFile
ExitProcess
MapViewOfFileEx
WriteFileEx
GetEnvironmentVariableW
CreatePipe
GetModuleHandleA
GetUserDefaultLangID
VirtualAlloc
LoadLibraryA
MapUserPhysicalPages
GetFileAttributesA
CreateSemaphoreW

msvcrt

_longjmpex
getchar
_y1
_spawnle
vsprintf
_adj_fdivr_m16i
_lrotl
_CIacos
??_7bad_cast@@6B@
fmod
_wctime64
_aexit_rtn
_waccess
memcpy

user32

PostMessageW
CharNextA
GetMonitorInfoW
ModifyMenuA
GetDlgItemInt
OemKeyScan
GetDC
SendMessageW
LoadStringA

gdi32

CreatePatternBrush
GetPaletteEntries
GetDeviceCaps
LineTo
SetRectRgn
SetBkColor
CreateFontIndirectW
GetDIBits
CombineRgn
GetTextExtentExPointW
SetBrushOrgEx
CreateRectRgnIndirect
CreateRectRgn
GetTextExtentPoint32W
CreateDIBSection
MoveToEx
SetViewportExtEx
EqualRgn
SetPixel

opengl32

wglSetPixelFormat
glTexCoord1sv
glGetPixelMapfv
glIndexubv
glMaterialiv
glLightf
glVertex3sv
glPixelMapusv
glIndexfv
wglDeleteContext
glBindTexture
glClipPlane

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e14dee58380e15ebcc48c761db6b4c50

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 512B - Virtual size: 60B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 60B