8ec15975496a530de7c556153e76281d

Sharing

Copy URL Twitter E-mail

General

Target

8ec15975496a530de7c556153e76281d
Size

159KB
MD5

8ec15975496a530de7c556153e76281d
SHA1

130211c2acc255a5638c7d66dc181ad1ad48d576
SHA256

8e38d260dafef694319df62da5c982ffb7303245773f12c28a17c50d8daab309
SHA512

db3ba7f5f2dd04f1706c2cce76f1c456aaaebbf7aa29e6e35cd0342c0f9514ab0d88f42d1420e8eae2cf52ebc383195da68901ec55a46029acf3492bae53556b
SSDEEP

3072:Salo1GqyuAm1gJ5Trlza5smoRiDzpoeT1rx5OjNEwR3QO+L4+:SacAm1gHrtu6UzTlOfOp4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec15975496a530de7c556153e76281d

Files

8ec15975496a530de7c556153e76281d
.exe windows:5 windows x86 arch:x86

cebfabe56e90974944dbc13a922ca6ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

FindTextW
ChooseFontW
PrintDlgExW
ChooseColorW
PrintDlgW

user32

GetWindowRect
InflateRect
DialogBoxIndirectParamA
IsCharUpperA
DefDlgProcW
GetDlgItemTextA
GetClientRect
AllowSetForegroundWindow
wvsprintfA
CharPrevA
GetActiveWindow
GetClassInfoExA
AppendMenuA
HiliteMenuItem
CreateCursor
SetMenuDefaultItem
InsertMenuA
SetWindowTextA
MessageBoxExW
GetUpdateRgn
GetClassInfoA
EnumThreadWindows
CreateIconIndirect
GetMenuStringA
MapVirtualKeyW
ShowScrollBar
IsWindowEnabled
SendDlgItemMessageW
IsDialogMessageW
RemovePropW
DispatchMessageA
FindWindowW
InvalidateRect
IsDialogMessageA
SetClassLongW
LoadStringA
LoadCursorA
SetCursorPos
InSendMessageEx
DrawIcon
DestroyIcon
ReleaseDC
IsMenu
GetDesktopWindow
SwitchToThisWindow
DrawIconEx
CharToOemBuffA
SendInput

kernel32

CallNamedPipeW
FindNextFileA
GetWindowsDirectoryW
CompareStringA
LocalFree
RemoveDirectoryA
SetPriorityClass
GlobalAddAtomA
CancelWaitableTimer
GetExitCodeThread
GetLocalTime
HeapUnlock
CreateFileMappingA
ClearCommBreak
ClearCommError
OpenFile
lstrcatW
GetCommandLineA
IsBadStringPtrW
lstrcmpiA
GetSystemWindowsDirectoryA
SearchPathW
CompareStringW

advapi32

RegCreateKeyExW
CryptDestroyKey
RegEnumKeyA
RegSetValueExA
CryptCreateHash
LookupAccountNameW

gdi32

RealizePalette
CreateSolidBrush
Escape
CreateFontA
ScaleViewportExtEx
CreateDIBSection
BeginPath
SetViewportExtEx
StartPage
CreateBitmapIndirect
CreateBitmap
EnumFontsW
SetWindowExtEx
GetDIBColorTable
SaveDC
GetTextExtentExPointW
CreateFontIndirectA
FillRgn
GetStockObject
SetPixel
CreateRoundRectRgn

Exports

Exports

FreeTimerExA@12

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cebfabe56e90974944dbc13a922ca6ba

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

user32

kernel32

advapi32

gdi32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 131KB - Virtual size: 200KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 131KB - Virtual size: 200KB

.reloc
Size: 3KB - Virtual size: 2KB