ad5ea80c2e63cbbbb98df565bd7fc307

Sharing

Copy URL Twitter E-mail

General

Target

ad5ea80c2e63cbbbb98df565bd7fc307
Size

28KB
MD5

ad5ea80c2e63cbbbb98df565bd7fc307
SHA1

6e2a20e1315646748d2a1eefdad5ec6579597697
SHA256

96c272fa22e017b707805e4335df5322de17724ddcc381fb428a89adaed4bcc7
SHA512

0f486090d4f0ae409d73d2be148f503765d8ab8f56aaa9a12f5b22850a26ba67c54448ef2405fdf7b55b4b23cc66e6d6abc4dd1c7052dbe88bde07ca1c6a0d6f
SSDEEP

384:NJxG2x1UsFmcLroppHqfgkkmxFOFOwnmnhDyl0Y0Blqb8d5X4bGbHd7nE:PxGO+OL4ppHqDk+Okwnm/UO5X4bGbRnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad5ea80c2e63cbbbb98df565bd7fc307

Files

ad5ea80c2e63cbbbb98df565bd7fc307
.exe windows:4 windows x86 arch:x86

fd5ea35c2013844bd93beb1153a0bece

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgimpui-2.0-0

gimp_ui_init

libgdk-win32-2.0-0

gdk_color_get_type

libglib-2.0-0

g_free
g_log
g_strchomp
g_strchug
g_strdup

libgobject-2.0-0

g_object_unref
g_signal_connect_data
g_type_check_instance_cast

libgtk-win32-2.0-0

gtk_accel_group_lock
gtk_action_group_add_actions
gtk_action_group_new
gtk_action_group_set_translation_domain
gtk_adjustment_get_type
gtk_adjustment_get_upper
gtk_adjustment_get_value
gtk_adjustment_set_value
gtk_box_get_type
gtk_box_pack_start
gtk_button_get_type
gtk_cell_renderer_text_new
gtk_cell_renderer_toggle_new
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_content_area
gtk_dialog_get_type
gtk_dialog_run
gtk_dialog_set_alternative_button_order
gtk_dialog_set_default_response
gtk_entry_get_text
gtk_entry_get_type
gtk_entry_new
gtk_entry_set_text
gtk_list_store_append
gtk_list_store_clear
gtk_list_store_get_type
gtk_list_store_new
gtk_list_store_set
gtk_main
gtk_main_quit
gtk_message_dialog_format_secondary_text
gtk_message_dialog_get_type
gtk_message_dialog_new
gtk_scrolled_window_get_type
gtk_scrolled_window_new
gtk_scrolled_window_set_policy
gtk_scrolled_window_set_shadow_type
gtk_table_get_type
gtk_table_new
gtk_table_set_col_spacings
gtk_table_set_row_spacings
gtk_tree_model_get
gtk_tree_model_get_iter
gtk_tree_model_get_iter_first
gtk_tree_model_get_type
gtk_tree_model_iter_nth_child
gtk_tree_path_free
gtk_tree_path_new_from_string
gtk_tree_selection_get_selected
gtk_tree_selection_select_iter
gtk_tree_view_append_column
gtk_tree_view_column_get_widget
gtk_tree_view_column_new_with_attributes
gtk_tree_view_get_model
gtk_tree_view_get_selection
gtk_tree_view_get_type
gtk_tree_view_get_vadjustment
gtk_tree_view_new_with_model
gtk_ui_manager_add_ui_from_string
gtk_ui_manager_get_accel_group
gtk_ui_manager_get_widget
gtk_ui_manager_insert_action_group
gtk_ui_manager_new
gtk_widget_destroy
gtk_widget_get_ancestor
gtk_widget_get_toplevel
gtk_widget_get_type
gtk_widget_set_size_request
gtk_widget_show
gtk_window_add_accel_group
gtk_window_get_type

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_textdomain

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
calloc
free
fwrite
signal
vfprintf

libgimp-2.0-0

gimp_install_procedure
gimp_main
gimp_plugin_icon_register
gimp_plugin_menu_register

libgimpbase-2.0-0

gimp_locale_directory
gimp_unit_get_abbreviation
gimp_unit_get_deletion_flag
gimp_unit_get_digits
gimp_unit_get_factor
gimp_unit_get_identifier
gimp_unit_get_number_of_built_in_units
gimp_unit_get_number_of_units
gimp_unit_get_plural
gimp_unit_get_singular
gimp_unit_get_symbol
gimp_unit_get_type
gimp_unit_new
gimp_unit_set_deletion_flag

libgimpwidgets-2.0-0

gimp_dialog_get_type
gimp_dialog_new
gimp_dialog_run
gimp_help_set_help_data
gimp_spin_button_new
gimp_standard_help_func
gimp_table_attach_aligned

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 216B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd5ea35c2013844bd93beb1153a0bece

Headers

File Characteristics

Imports

libgimpui-2.0-0

libgdk-win32-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgtk-win32-2.0-0

libintl-8

kernel32

msvcrt

libgimp-2.0-0

libgimpbase-2.0-0

libgimpwidgets-2.0-0

Sections

.text Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 1024B - Virtual size: 772B

.bss Size: - Virtual size: 216B

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 1024B - Virtual size: 772B

.bss
Size: - Virtual size: 216B

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 5KB - Virtual size: 4KB