b4a296f70481afc4246be224cd78cf28

Sharing

Copy URL Twitter E-mail

General

Target

b4a296f70481afc4246be224cd78cf28
Size

87KB
MD5

b4a296f70481afc4246be224cd78cf28
SHA1

7de7c7aa6ac82eba3c717ed49beef7f3f1ab0966
SHA256

2cda0cdf44b4d8676754b09846d0ed029819892adc0f38c75cb5429f5101cdd1
SHA512

7382197d8902eb80c64b9d7a8d36b4988d8e497b17baa34d7625b155a723018b79115b53dbe6d4f54917af7641ebc2b240c231b3c15b147a1a2c731cc42a8636
SSDEEP

1536:mGc7yxnco3lRn+efytsTVCSLjmbWmAfgdwO3VgneF:mGgGnb3lR5ytsZCS6xA4aYgeF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a296f70481afc4246be224cd78cf28

Files

b4a296f70481afc4246be224cd78cf28
.exe windows:4 windows x86 arch:x86

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

GetModuleHandleA
GetSystemInfo
GetVersionExA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
WriteFile
GetDiskFreeSpaceA
WritePrivateProfileStringA
FindClose
FindFirstFileA
IsDBCSLeadByte
SetFilePointer
ReadFile
GetPrivateProfileIntA
GetLastError
GetTickCount
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
FindResourceA
GlobalHandle
GetUserDefaultLCID
LoadLibraryA
GetProfileStringA
SetErrorMode
GetFileSize
FreeLibrary
CreateFileA
GlobalLock
GlobalAlloc
CloseHandle
GlobalFree
_hread
GlobalUnlock
CreateDirectoryA
lstrlenA
lstrcpyA
WinExec
GetDriveTypeA
SetStdHandle
VirtualAlloc
LCMapStringW
GetProcAddress
HeapFree
HeapAlloc
LCMapStringA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
RtlUnwind
GetStringTypeW
HeapCreate
HeapReAlloc
VirtualFree
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
HeapDestroy
ExitProcess

user32

DestroyWindow
EndDialog
DrawIcon
GetWindowPlacement
GetDlgItem
DialogBoxParamA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
LoadIconA
SetWindowTextA
InflateRect
SendMessageA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterClassA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
DrawTextA
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetSystemMetrics
CharNextA
GetParent
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
SetRect
MoveWindow
GetSysColor
PostQuitMessage
CreateWindowExA

gdi32

RestoreDC
SelectObject
DeleteObject
GetObjectA
SaveDC
CreateFontIndirectA
MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
ExtTextOutA
CreateSolidBrush
CreateDIBitmap
GetTextMetricsA
SelectPalette
GetDeviceCaps
RealizePalette
GetSystemPaletteEntries
UnrealizeObject
CreatePalette
BitBlt
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetStockObject
SelectClipRgn
GetTextExtentPointA

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4973a86f1dc54deac0bcca565e1f7af

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 14KB - Virtual size: 21KB

.rsrc Size: 20KB - Virtual size: 41KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 14KB - Virtual size: 21KB

.rsrc
Size: 20KB - Virtual size: 41KB