b4c8a01284d18afa7ce675a513876e19

Sharing

Copy URL Twitter E-mail

General

Target

b4c8a01284d18afa7ce675a513876e19
Size

180KB
MD5

b4c8a01284d18afa7ce675a513876e19
SHA1

e807da2913a45f0b2f32f22a010ae3545430f937
SHA256

fb2dbe3a807540bf0de430a2856c89cc0006d935f984861d39d87a794127070a
SHA512

231a7d9f339ed9a40b95b785453ceab77dae2d3d1759ca9176c9b7cf99199e2023851cd2b28e3c58423d13b28f77a61f3a8ee77e323f2a8225321110876a4c1e
SSDEEP

3072:QYLiFzn+IBKtOokOfGK5y8IpoE4Sph+IxlT6Xlc4U1Fy:P8lKUoLOB8IplxphTEc4U1F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c8a01284d18afa7ce675a513876e19

Files

b4c8a01284d18afa7ce675a513876e19
.exe windows:4 windows x86 arch:x86

bdb320c9457c884389c2bec7860fcbb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\aqub\Zafid\Tahadez\Ixediw\Zavo\edi\Tadefi\Lyfiz.pdb

Imports

user32

LoadIconA
SetMenuItemInfoA
EnableWindow
IsWindow
SetScrollInfo
DialogBoxIndirectParamA
MessageBoxA
GetSysColor
CreateWindowExA
SetFocus
RegisterClassExA
GetKeyNameTextA
GetWindowTextLengthA
GetClassInfoExA
CallWindowProcA
GetCursorPos
GetFocus
AppendMenuA
MapWindowPoints
GetSystemMetrics
DestroyMenu
BeginPaint
EmptyClipboard
InvalidateRect
PostMessageA
ValidateRect
IntersectRect
ExitWindowsEx
EndDeferWindowPos
SetParent
InflateRect

aclui

ord2
ord1

cabinet

ord11
ord12
ord14
ord10

ddraw

DirectDrawCreateClipper
DirectDrawCreate

kernel32

GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ReadFile
SetEndOfFile
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
GetCPInfo
GetCurrentProcessId
GetACP
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetOEMCP
GetVersionExA
SetTapePosition
GetWindowsDirectoryA
ResetEvent
PulseEvent
WaitForSingleObject
CreateEventA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
GetLastError
CloseHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetFilePointer
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bdb320c9457c884389c2bec7860fcbb1

Headers

File Characteristics

PDB Paths

Imports

user32

aclui

cabinet

ddraw

kernel32

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 60KB - Virtual size: 57KB

.data Size: 56KB - Virtual size: 726KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 60KB - Virtual size: 57KB

.data
Size: 56KB - Virtual size: 726KB