b4b7bb8f2d66b1694ffd5c510d0a243b

Sharing

Copy URL

Twitter E-mail

General

Target

b4b7bb8f2d66b1694ffd5c510d0a243b
Size

158KB
MD5

b4b7bb8f2d66b1694ffd5c510d0a243b
SHA1

73b6a556d403c45137cc1f9401092d450b488868
SHA256

efb6103147d123a4c99b751d58a420d42fbbfb726bc1093a2b1bf188b1b81c23
SHA512

c9a41f407a6f0055f6e12f3fd1d03b1cd502c7496238811f6cb53e4ec922d4880f8136239deb8b33551dd94fefc86648d419653012c039067ae9b79632996cd1
SSDEEP

3072:mU01A7ku2d2eBknZAIW4z73N/RnX4eC5EGtpcv6k3:mPZ/d2Kmnz5RnorEGtTk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b7bb8f2d66b1694ffd5c510d0a243b

Files

b4b7bb8f2d66b1694ffd5c510d0a243b
.exe windows:5 windows x86 arch:x86

910ebe1782ec55ad539fdcb09b7e4a23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
GetFileAttributesExA
GetCurrentConsoleFont
SetThreadPriorityBoost
GetPrivateProfileSectionNamesA
OpenEventA
VirtualFree
GetExpandedNameA
GetThreadPriorityBoost
GetThreadTimes
GetMailslotInfo
OpenFileMappingA
LocalSize
GetFileTime
IsBadCodePtr
GetPrivateProfileStringA
RemoveDirectoryA
CreateThread
GetTempFileNameA
BeginUpdateResourceA
SetHandleInformation
GetVersionExA
ReplaceFileA
GetTempPathA
GetFileAttributesA
GetCalendarInfoA
GetOEMCP
GetNamedPipeInfo
GetThreadSelectorEntry
SetSystemPowerState
LoadResource
GetVolumePathNameA
HeapUnlock
SetInformationJobObject
SetFilePointer
GetProcAddress
GetSystemWindowsDirectoryA
ResumeThread
VirtualAllocEx
SetProcessWorkingSetSize
LZStart
SuspendThread
GetCommState
WritePrivateProfileStructA
IsBadStringPtrA
RaiseException
HeapWalk
HeapCompact
IsValidLanguageGroup
GetNamedPipeHandleStateA
FreeConsole
FindAtomA
SetThreadLocale
MapUserPhysicalPages
GetSystemWindowsDirectoryA
GetFileSizeEx
ReadConsoleA
GetTapeStatus
SetTapePosition
WriteConsoleOutputCharacterA
GetSystemDefaultLCID

user32

RegisterServicesProcess
PostThreadMessageA
GetCursorPos
GetTitleBarInfo
SetFocus
IsCharAlphaNumericA
DragDetect
SetCursorContents
GetTaskmanWindow
OemToCharBuffA
CharToOemA
SetDebugErrorLevel
CopyRect
SetInternalWindowPos
GetWindowRect
MapVirtualKeyExW
EnumDisplayMonitors
GetClipCursor
AllowForegroundActivation
GetRawInputDeviceList
MenuWindowProcA
DlgDirListComboBoxW
GetDlgItemInt
InvalidateRgn
LoadAcceleratorsA
InsertMenuItemA
LoadCursorA
DrawIconEx
InflateRect
SetDoubleClickTime
InvalidateRect
GetFocus
GetWindowLongA
GetAsyncKeyState
EnumDisplayMonitors
EnumDisplaySettingsExA
SetWindowTextA
IsChild
SetSysColorsTemp
RegisterClipboardFormatA
RegisterWindowMessageA
DialogBoxIndirectParamAorW
GetRawInputDeviceList
LoadMenuIndirectA
GetMenuBarInfo
SendMessageTimeoutA
LoadCursorA
CreateWindowStationA
DlgDirSelectExA
CharNextExA
OpenWindowStationA
CreateAcceleratorTableA

odbc32

SQLBindParameter
SQLGetDiagField

glu32

gluTessEndContour
gluTessBeginContour

Exports

Exports

Pvhwdbf
Aohpocor
Dwvituh
InitKcbmrjsd
Jpqjgjjsmya
IsLqgayavbm
Whamduulfhn
CloseXoscslgmkh

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 51KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

910ebe1782ec55ad539fdcb09b7e4a23

Headers

File Characteristics

Imports

kernel32

user32

odbc32

glu32

Exports

Exports

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 51KB - Virtual size: 269KB

.rsrc Size: 51KB - Virtual size: 50KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 51KB - Virtual size: 269KB

.rsrc
Size: 51KB - Virtual size: 50KB