ad95650a22926b9ad9c08eed9dc60cbe

Sharing

Copy URL Twitter E-mail

General

Target

ad95650a22926b9ad9c08eed9dc60cbe
Size

257KB
MD5

ad95650a22926b9ad9c08eed9dc60cbe
SHA1

2f2970968b23d3bc7ee38dc73214bb74561e0482
SHA256

3a6365474457b41fea02a8932ae4cf33a4dff8885fd6c3f7fe2c932efe92b2a9
SHA512

9bc35c401b212d44336b0245e03738e7394b28a8c3741ccb2d1cad907ae1dbd2b75ccca6049a480caa687fb8af3a8ea0378f452ff18fa3764a319d81db2164a4
SSDEEP

6144:Zw5uNorx8FGq99QkbJFsNfoSE4xUEPq6U6:WI2FKKkdFvGxUmqV6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad95650a22926b9ad9c08eed9dc60cbe

Files

ad95650a22926b9ad9c08eed9dc60cbe
.exe windows:4 windows x86 arch:x86

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu
RegisterClassA
CreateMenu
GetWindowDC
RedrawWindow

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Create

oleaut32

SysReAllocStringLen
VariantChangeType
SysStringLen
SafeArrayGetElement
GetErrorInfo
SysFreeString

kernel32

GetCurrentProcessId
GetFullPathNameA
WriteFile
ExitProcess
RaiseException
GetStdHandle
lstrlenW
EnterCriticalSection
SetHandleCount
GetCurrentProcess
WideCharToMultiByte
LocalAlloc
GetCommandLineW
VirtualAllocEx
GetModuleHandleW
GetUserDefaultLCID
GetTickCount
GetVersion
LoadLibraryA
GetProcessHeap
GetDiskFreeSpaceA
GetSystemDefaultLangID
SetThreadLocale
GetCPInfo
GlobalAlloc
DeleteCriticalSection
WaitForSingleObject
GetThreadLocale
FreeLibrary
LocalReAlloc
GetLastError
GlobalAddAtomA
GetEnvironmentStrings
SizeofResource
GetTempPathA
HeapDestroy
VirtualAlloc
Sleep
DeleteFileA
GetVersionExA
InitializeCriticalSection
GetStartupInfoA
SetEndOfFile
LockResource
IsBadReadPtr
ResetEvent
GetLocalTime
SetErrorMode
HeapAlloc
lstrcmpiA
CreateThread
lstrcmpA
FormatMessageA
GetCurrentThread

Exports

Exports

_XBMLmudpqA2@4
W0_j5Ku@4
_qLtBeS@24
AV3ATS9B@4
G2Jlvhsh@8
_jlc2N@24
0RO_Jv@16
TjADImoU6WlmFj
39cgMwcoMY
_SJevSry
_if4x1l_v
IlCpp1uc
_Ua__x
xy0Yvm8mjqyCx
_1jrwZ
2MrapH
jhkRv
_ElWOaRNkWR@4
_606MEPMK@4
_8SDvr3I7b1g
lAdjH
_A5uAie2Ntb@8
_Cs_0Q6vqxMWh
_Frz9DhEFZruc
s4stEm3GlBC
_XpYdV@8
_VVUoNe8xjT@24
KRSqGW7@4
_Zg_vm
H6DEkeeIQjw5@12
_T33IVWjbB6gX
_H2I0tGiQMTRDSN@12
xKl1SCjNe
_4ZTcby_m9vy
aAs4X
_pXqJX8CkulMx@12
_LA9OPlQLHk6@24
9FLkv9Sgyq4c@12
_2DXCm_
_NR8jZWhIGva
_7RgEDOQ
yIAdu
cRYXqwCXZ49
YyNYUkv_VYE7E
g_gdph
_wGnTo2HCmu@12
_yhRAsr
_T5GiBtx5EOx
_9MIT7b_7S0@20
rGwzc4z7lwB
gXQyjJ_2siF
_1AeLPQWXC4N@8
_wdnwysG_FBqx@8
MlwhCyUY
zTydbQF@16
_ywHsg6ns1e
_MOMqxPcpG_weOt
_Qa1rXl@24
_bNisN0_iWnU2O@12
_6uSFZT
_BUVNGxu79LJT@8
X_eX3d0
svqDI@8
_miTmzjoQ3iRJF
EYdXCVX7@16

Sections

CODE
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.iudata
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2832f9973ab344026d2e98ff0a53c69

Headers

File Characteristics

Imports

user32

comctl32

oleaut32

kernel32

Exports

Exports

Sections

CODE Size: 32KB - Virtual size: 32KB

DATA Size: 11KB - Virtual size: 798KB

.iudata Size: 207KB - Virtual size: 207KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 32KB - Virtual size: 32KB

DATA
Size: 11KB - Virtual size: 798KB

.iudata
Size: 207KB - Virtual size: 207KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB