a3bedd516d9acc435932d986040fd331

Sharing

Copy URL Twitter E-mail

General

Target

a3bedd516d9acc435932d986040fd331
Size

47KB
MD5

a3bedd516d9acc435932d986040fd331
SHA1

0f0b7fd9872fe3e0aed0e5a197454c55d8f1d7df
SHA256

f1b3e2222166c92c05988f8bf368add267c4418b08754a3e8ea07e76d5b20988
SHA512

b7ea46e3ec9468844e7111eb1800fd702d5756349ea62a0ab3f265e5a49d16e94bd998e8f3a0ed84ee6a573efc47882216ca658b5742426e7f39c18b9429fdb3
SSDEEP

768:RkAVAzcrdKWx7kG/Un+eysKGaNbeKQkerqkcrR:SIUcSpn+edaNyKbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3bedd516d9acc435932d986040fd331

Files

a3bedd516d9acc435932d986040fd331
.exe windows:5 windows x86 arch:x86

40b703db2359b35ad251c2f67458d5ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
HeapAlloc
GetProcAddress

user32

GetForegroundWindow
GetKeyboardLayout
GetMenu
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongW
IsClipboardFormatAvailable
GetFocus
LoadIconW
MessageBeep
MessageBoxW
OpenClipboard
PostMessageW
RegisterClassExW
SendMessageW
SetActiveWindow
SetWindowTextW
TranslateAcceleratorW
TranslateMessage
wsprintfW
GetDesktopWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DestroyWindow
DefWindowProcW
CloseClipboard
CheckMenuItem
CharNextW
IsIconic

comdlg32

CommDlgExtendedError
FindTextW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
GetSaveFileNameW
ChooseFontW

msvcrt

abs

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

unit1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

unit5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40b703db2359b35ad251c2f67458d5ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

msvcrt

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 288B

unit1 Size: 1024B - Virtual size: 1000B

unit2 Size: 1024B - Virtual size: 1000B

unit3 Size: 1024B - Virtual size: 1000B

unit4 Size: 1024B - Virtual size: 1000B

unit5 Size: 1024B - Virtual size: 1000B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 614B

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 288B

unit1
Size: 1024B - Virtual size: 1000B

unit2
Size: 1024B - Virtual size: 1000B

unit3
Size: 1024B - Virtual size: 1000B

unit4
Size: 1024B - Virtual size: 1000B

unit5
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 614B