b676e5a72b82072e19448e011771caab

Sharing

Copy URL

Twitter E-mail

General

Target

b676e5a72b82072e19448e011771caab
Size

441KB
MD5

b676e5a72b82072e19448e011771caab
SHA1

40a976392e36f450737fe5f0026bb5a79849c097
SHA256

a944f9a2919c6970214feb520ab3b4903f3a6a84ed73f1acfdd07a12832ca234
SHA512

8732b0451aecc394e0c50e1abbe3ae322943ace59614dfe8e02250b8d517dc44f1ca7231d9cd8801e9e0e92723a9573ddc93c3789dabfc48b31ad15267d41a6c
SSDEEP

6144:AAnIMEk0XfxL65NKpNOs8mzG86VzZM7sDrpzxsNE8qs5HPdDujodTLSsTiNbT7N:3nl2JL65q0s8mz9efX9xsNY0BcuYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b676e5a72b82072e19448e011771caab

Files

b676e5a72b82072e19448e011771caab
.exe windows:4 windows x86 arch:x86

68310f6db6768aec6672b1d711a14742

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemCodePagesA
GetOEMCP
GetCurrentProcess
GetCPInfo
GetStartupInfoA
GetNamedPipeHandleStateW
HeapCreate
HeapDestroy
DeleteCriticalSection
InterlockedExchange
TlsSetValue
IsBadWritePtr
GetCurrentProcessId
GetDateFormatA
HeapAlloc
VirtualFree
GetCurrentThreadId
GetTickCount
SetEnvironmentVariableA
GetEnvironmentStrings
GetSystemTimeAsFileTime
VirtualProtect
CompareStringW
IsValidLocale
FreeEnvironmentStringsW
WideCharToMultiByte
HeapReAlloc
GetStdHandle
GetModuleFileNameA
GetTimeFormatA
GetLastError
TlsAlloc
HeapFree
LCMapStringA
GetWindowsDirectoryA
TlsFree
InitializeCriticalSection
VirtualAlloc
PulseEvent
GetCurrentThread
EnumSystemLocalesA
TerminateProcess
GetFileType
RtlUnwind
GetUserDefaultLCID
GetVersionExA
GetCommandLineA
IsValidCodePage
GetTimeZoneInformation
GetStringTypeW
LocalShrink
LoadLibraryA
LeaveCriticalSection
LCMapStringW
GetModuleHandleA
QueryPerformanceCounter
EnterCriticalSection
HeapSize
SetHandleCount
GetEnvironmentStringsW
WriteFile
SetLastError
MultiByteToWideChar
ExitProcess
GetProcAddress
CreateDirectoryExW
GetLocaleInfoW
GetCommandLineW
SetComputerNameA
GetSystemInfo
TlsGetValue
GetStringTypeA
GetACP
GetLocaleInfoA
VirtualQuery
UnhandledExceptionFilter
FreeEnvironmentStringsA
CompareStringA
ReadConsoleInputA

gdi32

GetViewportOrgEx
CreateDIBPatternBrush
DPtoLP
UpdateColors
EnumFontsA
ExtEscape
GetTextFaceW
UpdateICMRegKeyA
GetCharABCWidthsA
ColorMatchToTarget
GetColorAdjustment
GetTextCharset
CreateDIBitmap
SetMapMode
Polygon
StartDocA
CopyMetaFileA
GetDIBits
CreateICW

user32

GetMessageExtraInfo
SetDlgItemTextW
EndDialog
DefDlgProcA
CreateIcon
EnumWindowStationsW
IsChild
GetWindowTextW
RemoveMenu
SetWindowTextW
DragDetect
SetCapture
SetRectEmpty
DdeUninitialize
EnableMenuItem
SetMenuItemBitmaps

shell32

DragQueryPoint
SHAppBarMessage
RealShellExecuteExA
SHGetSpecialFolderPathA

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68310f6db6768aec6672b1d711a14742

Headers

File Characteristics

Imports

kernel32

gdi32

user32

shell32

Sections

.text Size: 146KB - Virtual size: 146KB

.rdata Size: 7KB - Virtual size: 14KB

.data Size: 284KB - Virtual size: 284KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 146KB - Virtual size: 146KB

.rdata
Size: 7KB - Virtual size: 14KB

.data
Size: 284KB - Virtual size: 284KB

.rsrc
Size: 2KB - Virtual size: 1KB