a227a3f0a97eab8fa26c8de82e44de6a

Sharing

Copy URL Twitter E-mail

General

Target

a227a3f0a97eab8fa26c8de82e44de6a
Size

77KB
MD5

a227a3f0a97eab8fa26c8de82e44de6a
SHA1

c9f00de834ac771bdf39d99e5978e8139f13a3eb
SHA256

36c4fd7c5d4314f472a752339137944235e3008e0f8cd539ab7728ca07eb995f
SHA512

9fcf5c83380a273480252750a2c7be2c0cb11956a3d3eeaba0a4215a1543c230dc85948bd50fce118dcedb57cbe318327a0275b66428ee17f1ea31237eb38913
SSDEEP

1536:AiQgzHtb9+eQi4C9bnWe7z9EQ3G2e7JqSbk4p:lQgzHb+CNhWSGXVqz4p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a227a3f0a97eab8fa26c8de82e44de6a

Files

a227a3f0a97eab8fa26c8de82e44de6a
.exe windows:4 windows x86 arch:x86

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCapture
FrameRect
GetActiveWindow
GetClassInfoA
GetMenu

kernel32

lstrcmpA
lstrcatA
GetCurrentThreadId
FormatMessageA
GlobalDeleteAtom
GetCommandLineA
GetThreadLocale
FreeResource
HeapFree
GetCurrentProcessId
SetThreadLocale
HeapDestroy
WriteFile
GetEnvironmentStrings
Sleep
GetSystemDefaultLangID
GlobalAlloc
MoveFileExA
IsBadReadPtr
GetCPInfo
GetStringTypeA
GetFileSize
GetDateFormatA
lstrcpynA
SetFilePointer
GetModuleHandleA
GetACP
HeapAlloc
ExitProcess
LockResource
GetModuleFileNameA
GetFullPathNameA
LocalAlloc
GetStringTypeW
DeleteFileA
SetErrorMode
ExitThread
IsBadHugeReadPtr
WideCharToMultiByte
FindFirstFileA
GetUserDefaultLCID
GetVersionExA
InitializeCriticalSection
FindResourceA
LoadLibraryA
GetCurrentProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
MoveFileA
CreateEventA
GetCommandLineW
VirtualAllocEx
GetLastError
SetHandleCount

comctl32

ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Add

gdi32

SetPixel
CopyEnhMetaFileA
CreateDIBitmap
SetBkColor

Exports

Exports

g0Oaj
_z5GeDLM@20
erEFDy
zwMSPbqRRTUNo
_sjKoqk_5pxln5@4
_ZQadjDUaug
lFe5j8wORwk@4
pmLPa@16
_NL0O_Vv@12
6y5i_Rs@8
_0_Qz4Bnq6pVDni@12
_aLlzzt_B@4
qdrbZ@4
_tlZ61Ed5@20
_2wVLeetDs
_iHoN1
eiQyF@24
vGbDutBN5vA
uDfCr_qKV@8
6DcG_R@4
_uAwjE9H@8
_Ozqlygf@8
_KMJ9w7cu
_c7N327FoK4m@24
QWd5RYQ
_DQ_4JzTNaEp6V
A5KsPNpR6AuR
AYvAre0@20
_HqdPVMFW6jKkk
_Og95dtr1HEi
_VlRBFY9o8HflR6
_WJ6r6PW
_4zwMjl8ZLq5q
_6w3juKVQ
_Kjaxc6w4w@20
_BqREHTkE84ZeN6@24
1wUbW@20
qJF0D6YnV9
_LmYYoc1G
BgBdtud@24
_8MNgEX
P4XjqYj0ZC@16
38_bt
l9xLjnC2qEmMfw
IoIOSx9xHkE5
_Fspaa5aVexX6F@16
PHhtt7OlknkzWK@16
_zOOxKL
HVdV4ineJqC1
tD0Tx3@24
_enGbgZ3VHa@20
f6ob1u7S
tTBZL0HO@24
PpXtVKCqEWywoR
wIc7T3rrfNrmgA
_pr1JXszF3yYNsF
_LMTyAfZR@20
_iFTcsP@16
AhLorke@12
_aUwfJvIuSD@16
0nlUFdTq@24
_JQJ0wiO2TLs_6@20
___JuamE
_75xXuw1xZS@24
9l0KCzaiXd@24
fEx95FDwg89J

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kldata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

825db8cf3c6878320f1d311d1308f717

Headers

File Characteristics

Imports

user32

kernel32

comctl32

gdi32

Exports

Exports

Sections

CODE Size: 12KB - Virtual size: 12KB

.DATA Size: 10KB - Virtual size: 30KB

.kldata Size: 48KB - Virtual size: 47KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 12KB - Virtual size: 12KB

.DATA
Size: 10KB - Virtual size: 30KB

.kldata
Size: 48KB - Virtual size: 47KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB