9a222bb9369b9acf2a4332a344e4e86c

Sharing

Copy URL Twitter E-mail

General

Target

9a222bb9369b9acf2a4332a344e4e86c
Size

30KB
MD5

9a222bb9369b9acf2a4332a344e4e86c
SHA1

79ce71b87d1ed7a4cf4ea50187bab190fc1c6f42
SHA256

c1a3ea4b9db27648f0fb263bc4083765bc204eb42d0a7ee9147679eab9bf201f
SHA512

0c04e9849b31dc904e7b90e68dd941000ceb126ffcea792b11b078bd55607335aa60e6f6c41392bef6fb6f68c21ee9fafec3b1871d45faa3df3931117ae92b74
SSDEEP

768:MvKlP7M0E69srJ6c+515QlDOWKQ6oqxZbW:VlP7M0EN6ZHczf6dU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a222bb9369b9acf2a4332a344e4e86c

Files

9a222bb9369b9acf2a4332a344e4e86c
.exe windows:5 windows x86 arch:x86

f9b6ef313605bae8aedcd532968c678c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
QueryPerformanceCounter
GetModuleHandleA
Sleep
LocalFree
HeapDestroy
MultiByteToWideChar
CreateThread
MultiByteToWideChar
InitializeCriticalSection
GetVersionExA
GetVersionExA
LeaveCriticalSection
GetModuleHandleW
DisableThreadLibraryCalls
SetLastError
ReadFile
EnterCriticalSection
CloseHandle
CreateFileW
GetCurrentProcess
InterlockedCompareExchange
LocalAlloc
GetCurrentThreadId
SetLastError
GetProcAddress
GetProcAddress
CloseHandle
LoadLibraryA
CloseHandle
MultiByteToWideChar
GetSystemTimeAsFileTime
LeaveCriticalSection
ReadFile
CloseHandle
InitializeCriticalSection
GetVersionExA
UnhandledExceptionFilter
HeapDestroy
GetTickCount
lstrcmpiW
LeaveCriticalSection
lstrcmpiW
lstrcmpiW
GetModuleFileNameW
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
GetCurrentThreadId
InitializeCriticalSection
CloseHandle
InitializeCriticalSection
InterlockedDecrement
Sleep
InterlockedCompareExchange
GetModuleFileNameW
GetModuleHandleW

user32

EnableWindow
GetParent
SetForegroundWindow
BeginPaint
GetSysColor
CreateWindowExW
EndDialog
SetWindowLongW
TranslateMessage
TranslateMessage
BeginPaint
GetClientRect
wsprintfA
IsWindow
GetParent
SetCursor
GetSysColor
LoadStringW
GetFocus
TranslateMessage
ReleaseDC
PeekMessageW
SetCursor
GetWindowLongW
PeekMessageW
GetClientRect
EnableWindow
GetWindowLongW
SetFocus
EndDialog
EnableWindow
ReleaseDC
CreateWindowExW
SetTimer
LoadCursorW
PostMessageW
DefWindowProcW
SetTimer
ShowWindow
SetTimer
BeginPaint
SetWindowLongW
CreateWindowExW
GetDlgItem
LoadIconW
SetCursor
PeekMessageW
LoadIconW
SetWindowPos
GetDlgItem
PostMessageW
DefWindowProcW
PeekMessageW
LoadStringW
LoadCursorW
CharNextW
LoadIconW
GetDlgItem
GetSystemMetrics

Sections

.text
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9b6ef313605bae8aedcd532968c678c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 22KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 22KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB