9b2d688f0dd4e7cd2f18264b59872770

Sharing

Copy URL Twitter E-mail

General

Target

9b2d688f0dd4e7cd2f18264b59872770
Size

65KB
MD5

9b2d688f0dd4e7cd2f18264b59872770
SHA1

c60ad77150e910df04b0cf78a4a2458d5d876eed
SHA256

de6912ba37dc008a2f47259f1dd54ef6f80295b65cda7de9fc7a8ae3fab012c4
SHA512

5eb7d2bb3b2d5925e27839f4025138834ad604d50f1dac5550798ab0f8eeb90d75be380b6a050409c849b663c65366c4fdf7399bf58c203a8ce201778766427b
SSDEEP

1536:GUPdaLNcKL7EzwhWEIJwIbyYZvzVkn8JX5vuBp+:DPoS2Ez2pwfZvzenyX5Gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b2d688f0dd4e7cd2f18264b59872770

Files

9b2d688f0dd4e7cd2f18264b59872770
.exe windows:4 windows x86 arch:x86

c48d759c7b16465c8f8761c505175a8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
AppendMenuA
IsMenu
DialogBoxParamA
AppendMenuW
CopyImage
AlignRects
CopyRect
LoadMenuA
EndDialog
LoadCursorA
IsWindow
GetWindowTextLengthA
InsertMenuA
BlockInput
CloseWindow
DrawTextA
GetDC
GetWindowTextA
CopyRect
DrawIconEx
DrawIcon
DrawTextA
GetDC
DialogBoxParamW
IsMenu
GetMenu
IsWindow
CalcMenuBar
LoadCursorA
GetCursor
CloseWindow
GetFocus

kernel32

FindFirstFileA
DeleteAtom
CreateProcessA
SetLastError
OpenFile
CopyFileW
GlobalFree
ReadConsoleA
GetFileSize
WriteFile
DeleteFileW
CopyFileExW
CopyFileW
GetConsoleMode
DeleteFileA
CreateThread
WriteFile
CopyFileExA
FindFirstFileA
ReadConsoleA
GetFileSize
GetCommandLineA
CreateDirectoryA
GetComputerNameA
CopyFileA
GetLastError
SetLastError
GetCPInfo
ReadFile
GetConsoleMode
OpenFile
GetCPInfo
FindFirstFileA
GetComputerNameA
GetStdHandle
ExitThread
GetLastError
GetFileTime
ReadConsoleA
GetFileSize
CopyFileA
DeleteFileA
Sleep
CreateDirectoryA
GlobalFree

comctl32

ImageList_GetIconSize
ImageList_Remove
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_Draw
ImageList_DragLeave
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_LoadImage
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_Create
ImageList_Read
ImageList_GetImageCount
ImageList_Copy

advapi32

RegEnumKeyW
RegEnumKeyA
RegQueryValueExW
RegEnumKeyExA
RegCreateKeyW
RegDeleteValueA
RegEnumKeyExW
RegLoadKeyW
RegOpenKeyW
RegLoadKeyA
RegFlushKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c48d759c7b16465c8f8761c505175a8a

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 55KB - Virtual size: 164KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 55KB - Virtual size: 164KB

.rsrc
Size: 1KB - Virtual size: 1KB