b70a89584c302b9f8a0d91eff4089e12

General

Target

b70a89584c302b9f8a0d91eff4089e12
Size

127KB
MD5

b70a89584c302b9f8a0d91eff4089e12
SHA1

2ae848450bf6d76b298023205cafc78c234f6e1a
SHA256

0ea618b66b5dc1e8466b5e76bac9cf4df02806a6ad5e2b4dbed48342f49e354d
SHA512

2c773ed5c615a028212b8d674ec163fbb16c78ef6e6120e7fbc35ac1b2ce4052a87ded31023919e65c4083e142dbd8817e02b22e3de1a383210607c091663204
SSDEEP

1536:l5VAuxk6efie1FJ0NF2jaCleciS3bYK3PTlV2tXt/u:lTAvDiUENF29lifK3Jw1M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b70a89584c302b9f8a0d91eff4089e12

Files

b70a89584c302b9f8a0d91eff4089e12
.exe windows:5 windows x86 arch:x86

3b68e7a5ea5feff0d08f9230ccd79884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
LoadCursorA
DrawIcon
DrawTextA
GetFocus
DrawIconEx
EndDialog
GetWindowTextA
InsertMenuA
GetWindowTextLengthA
InsertMenuA
GetScrollInfo
GetWindowTextLengthA
GetCursor
EndDialog
GetMenu
LoadCursorA
IsWindow
AppendMenuA
CopyImage

advapi32

RegQueryValueA
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyA
RegDeleteKeyW
RegEnumKeyW
RegFlushKey
RegEnumKeyA

kernel32

ExitProcess
GetFileTime
FreeResource
OpenFileMappingA
HeapFree
DeleteFileW
CompareStringA
ExitThread
lstrlenA
GlobalFree
DeleteFileA
CompareStringA
ExitProcess
lstrlenA
GetCommandLineA
GetFileType
CreateDirectoryA
FreeResource
GlobalFree
GetLocalTime

Sections

.kcbn
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dncn
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cbnhb
Size: 72KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jjla
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.djen
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b68e7a5ea5feff0d08f9230ccd79884

Headers

File Characteristics

Imports

user32

advapi32

kernel32

Sections

.kcbn Size: 13KB - Virtual size: 12KB

.dncn Size: 30KB - Virtual size: 29KB

.cbnhb Size: 72KB - Virtual size: 452KB

.jjla Size: 2KB - Virtual size: 1KB

.djen Size: 7KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 571B

.kcbn
Size: 13KB - Virtual size: 12KB

.dncn
Size: 30KB - Virtual size: 29KB

.cbnhb
Size: 72KB - Virtual size: 452KB

.jjla
Size: 2KB - Virtual size: 1KB

.djen
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 571B