9baceca0f06900dc9011ed743ac95e23

Sharing

Copy URL Twitter E-mail

General

Target

9baceca0f06900dc9011ed743ac95e23
Size

95KB
MD5

9baceca0f06900dc9011ed743ac95e23
SHA1

0843a8fc70b5f0621c943a9adc7f072f8c12a465
SHA256

b62dbb564a032a89b1794b6d2403a6338dfc1305d57155737c06799a15010682
SHA512

b673d33ce4930f6b9f3c1be90857a80a6712ac94d8a93cdc271094e5197418985682681431bc2f1df119dbfc35fd0bc8d8dbd2e85be0d6161ef48b96f7206989
SSDEEP

1536:NXrIsNu5nfuegiAR0lsVBLcskgQ8rJyUvn8rP5zek9O:5u5nlgLYsVBHNyUv8j5N9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9baceca0f06900dc9011ed743ac95e23

Files

9baceca0f06900dc9011ed743ac95e23
.exe windows:4 windows x86 arch:x86

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
VirtualAllocEx
GetLocalTime
GetCurrentThreadId
FreeResource
FreeLibrary
LockResource
SetErrorMode
HeapDestroy
GetDiskFreeSpaceA
SetLastError
MulDiv
GetSystemDefaultLangID
lstrlenW
HeapFree
DeleteCriticalSection
WriteFile
RaiseException
ExitThread
VirtualQuery
GetLocaleInfoA
GetCurrentThread
EnterCriticalSection
GetStringTypeA
CompareStringA
WideCharToMultiByte
SetFilePointer
ExitProcess
GetCurrentProcess
GetEnvironmentStrings
GetFileAttributesA
SizeofResource
lstrcmpA
GetProcAddress
GetDateFormatA
IsBadReadPtr
FindFirstFileA
DeleteFileA
GetProcessHeap
GetACP
lstrcmpiA
VirtualAlloc
Sleep
LoadLibraryA
LocalFree
CloseHandle
MoveFileA
GetFileType
GetCommandLineW
GetModuleFileNameA
LocalAlloc
GetVersion
IsBadHugeReadPtr

comctl32

ImageList_Create
ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Write
ImageList_DrawEx

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyA

user32

GetSysColorBrush
EnumWindows
EnumChildWindows
EnumThreadWindows
EqualRect
IsMenu
IsWindowUnicode
GetTopWindow
GetMenu

Exports

Exports

C5qSGKpfTdU5
sDuYdoPMPjjB
_QqlHS35B02
0xb0Tx41AKF
_ZF_wRE@20
aLk_L8_GD6
_NBjQaLhwzI9
_nYszemP@16
__R2ziurxzA
4BMsc_N7i
_iwoS9ov
_eIWNcR_mDoZa@24
8dFYC0a4Ir@20
SHqA55koqKdxZG@4
lXCjjKJk@12
_ddb1zvQZ_cd
_Ti4vPwrxwQkJ
WZXRQ5vEf@4
_Nc8bnoPxE@12
q19DVv9@8
dyR2hgPu_e
_rKBor5EC1lE81N
kKnJA9CxBlRCez@12
_p6otO@12
xjwajE5@4
_eF5lzWpaPq@8
_BchRkFe_y
_ANK_smmfDmuV
_IheDaI4MFgMz6
PwTwbT_s67ucgd
p4BSuSF2S8@20
_nbrNeIq1@8
_uDW4MOF_@16
oGYHT9fJ
_pA514@4
_qwv_Ct@8
_7N2OutJOARQ7D
_nWoEj4pGwxJD@20
_muUis
SC8x5HWwd
G4dJwWtp9ViA@4
JmrSht2
_sOkGOe6jJ@8
_TL3W1@4
WSAEIrj7@4
_yaIjVkH9BJ
wUx1Gu8
urSsHrkyOuPX
FJ_lY84NdLSxm0
_1A4A60RC
_4RN0HyTOZ
_lhniUvM
F3SxCUHomPO@12
_PVNEK6iWf9L@12
6BHpcfMkWIOj
_nPanqGvmsP1IE
ktbgpaRMu3@24
_CATF580
9jgjE_vx_W
_RrzLrQz@24
_Jf5Q0OlMbcifj
rHrFAGtzH@16
_G2uuLSt6FTH2@8
_v6gontFSI@24
_3C1Zfq@4

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 10KB - Virtual size: 9KB

.kudata Size: 51KB - Virtual size: 50KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 10KB - Virtual size: 9KB

.kudata
Size: 51KB - Virtual size: 50KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB