97596684d20ec990d1d7766b3add7890

Sharing

Copy URL Twitter E-mail

General

Target

97596684d20ec990d1d7766b3add7890
Size

49KB
MD5

97596684d20ec990d1d7766b3add7890
SHA1

8b67c0ac4bf218020e79ce71b112ef1c991c8f71
SHA256

79db24858c741d6446fab96f1b05deed85176327be8ebe454898bc9273f70359
SHA512

d3c12446b2ea89fe99c7fb1291105595b8937f0c2708986fdd48bd9615fe69995787302d8b9ec863699f9f0c191e5e986e7b31b36a4d65f7ba16c4130eb49f28
SSDEEP

768:LkADAzcrdKWx7kG/Un+eysKCaNbeKQkedqkcr9:4yUcSpn+edaNyKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97596684d20ec990d1d7766b3add7890

Files

97596684d20ec990d1d7766b3add7890
.exe windows:5 windows x86 arch:x86

40b703db2359b35ad251c2f67458d5ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
HeapAlloc
GetProcAddress

user32

GetForegroundWindow
GetKeyboardLayout
GetMenu
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongW
IsClipboardFormatAvailable
GetFocus
LoadIconW
MessageBeep
MessageBoxW
OpenClipboard
PostMessageW
RegisterClassExW
SendMessageW
SetActiveWindow
SetWindowTextW
TranslateAcceleratorW
TranslateMessage
wsprintfW
GetDesktopWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DestroyWindow
DefWindowProcW
CloseClipboard
CheckMenuItem
CharNextW
IsIconic

comdlg32

CommDlgExtendedError
FindTextW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
GetSaveFileNameW
ChooseFontW

msvcrt

abs

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

unit1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40b703db2359b35ad251c2f67458d5ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

msvcrt

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 288B

unit1 Size: 1024B - Virtual size: 1000B

unit2 Size: 1024B - Virtual size: 1000B

unit3 Size: 1024B - Virtual size: 1000B

unit4 Size: 1024B - Virtual size: 1000B

unit5 Size: 1024B - Virtual size: 1000B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 614B

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 288B

unit1
Size: 1024B - Virtual size: 1000B

unit2
Size: 1024B - Virtual size: 1000B

unit3
Size: 1024B - Virtual size: 1000B

unit4
Size: 1024B - Virtual size: 1000B

unit5
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 614B