97e01e71676e286be11875afc44a3263

General

Target

97e01e71676e286be11875afc44a3263
Size

288KB
MD5

97e01e71676e286be11875afc44a3263
SHA1

ed63a9dab662d8d00d64306233a4ce435be73c15
SHA256

14a9831d09ad873587d62aa73eba07d7184bc0464043b4079ca1ab1589e337f9
SHA512

faf38cd8c0e20253a9352bf2f2dfb6afc9f76c51dc64572eeb59efd2dbe26c910508072bc924721fc25c20067cb8c3b3b4859ae70333358abf00f4f590e3d8e0
SSDEEP

6144:dMxEZaatMYOxzDSSDUOH+2ZldFCp3/PceBcGIfm1:qyC3SSFH5FCp8kck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97e01e71676e286be11875afc44a3263

Files

97e01e71676e286be11875afc44a3263
.exe windows:4 windows x86 arch:x86

d66a6264f181787f01f14d52d03f4cf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
TranslateMessage
GetPropW
UnregisterHotKey
CreateMenu
DeferWindowPos
GetMessagePos
UpdateWindow
GetClassNameW
GetDC
GetAsyncKeyState
EnumChildWindows
GetWindowTextW
FindWindowW
RegisterWindowMessageW
DialogBoxIndirectParamW
CreatePopupMenu
GetSysColorBrush
GetForegroundWindow
CreateDialogIndirectParamW
GetWindowThreadProcessId
GetClientRect
BeginDeferWindowPos

mgmtapi

SnmpMgrCtl
SnmpMgrStrToOid
SnmpMgrOidToStr
SnmpMgrGetTrapEx
SnmpMgrRequest

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
fgets
fgetwc
_fcloseall
fwscanf
fseek
fclose
fopen
memcpy
memset
_ftol
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

kernel32

LocalFree
LoadLibraryA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoW
GetModuleHandleW
VirtualProtect
SetTapeParameters
GetDriveTypeW
GetProcAddress
LoadLibraryW
GetTickCount
Sleep
DeleteCriticalSection
CreateFileW
SetEndOfFile
GetFileSize
ReadFile
CloseHandle

Sections

.text
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d66a6264f181787f01f14d52d03f4cf8

Headers

File Characteristics

Imports

user32

mgmtapi

msvcrt

kernel32

Sections

.text Size: 148KB - Virtual size: 145KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 76KB - Virtual size: 219KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 148KB - Virtual size: 145KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 76KB - Virtual size: 219KB

.rsrc
Size: 4KB - Virtual size: 2KB