ab1d873d92302df9cdbe1bbb67f4c9f1

Sharing

Copy URL

Twitter E-mail

General

Target

ab1d873d92302df9cdbe1bbb67f4c9f1
Size

485KB
MD5

ab1d873d92302df9cdbe1bbb67f4c9f1
SHA1

7985c9cbb9c1b84b910f47b2096fd5f02ca97829
SHA256

9ad94c700902f2b8987a61d65cf57169a6720eac234a2bee2a252192ee798bff
SHA512

7140d51c26430d0f1b37110575944d62c8e52a6aea0169ca728bfe430d5a61dae542e3b8a28cae0fd82b2fbba985fd636b9cffd78e5af61bc36c6f9e76b0290d
SSDEEP

12288:nbaOt4cDU+iTDwZGdXbL3JTdofqNLHagw8Dw0/kU1j31:bDDsm+rL5TRNL6iwiku

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1d873d92302df9cdbe1bbb67f4c9f1

Files

ab1d873d92302df9cdbe1bbb67f4c9f1
.exe windows:4 windows x86 arch:x86

e212711427a6addd8251a83c49665e51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePalette
CreateHalftonePalette

ws2_32

WSAAddressToStringW

advapi32

RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegQueryValueW
RegCloseKey
RegEnumKeyW

winmm

mmioSeek
mmioClose
mmioRead
mmioWrite
mmioOpenW

user32

IsRectEmpty
SendDlgItemMessageW
PeekMessageW
EndDialog
CheckDlgButton
SetDlgItemTextW
EnableWindow
TranslateMessage
MessageBoxW
GetDC
CharPrevW
ReleaseDC
SetRect
DialogBoxParamW
DispatchMessageW
DestroyWindow
LoadStringW
EnumPropsW
SendMessageW
MessageBeep
SetRectEmpty
GetDlgItemInt
SetDlgItemInt
IsDlgButtonChecked
wsprintfW

kernel32

Beep
GetLastError
VirtualAlloc

lz32

LZClose

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 461KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e212711427a6addd8251a83c49665e51

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

ws2_32

advapi32

winmm

user32

kernel32

lz32

Sections

.text Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 28B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 461KB - Virtual size: 461KB

.data Size: 9KB - Virtual size: 2.1MB

.rdata Size: 10KB - Virtual size: 9KB

.text
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 28B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 461KB - Virtual size: 461KB

.data
Size: 9KB - Virtual size: 2.1MB

.rdata
Size: 10KB - Virtual size: 9KB