b73782a1bf445858f82380ee71a72a50

General

Target

b73782a1bf445858f82380ee71a72a50
Size

92KB
MD5

b73782a1bf445858f82380ee71a72a50
SHA1

b484c5513c9415268e0844d1cbdee55b6d069a92
SHA256

cb7aac9b1ac3f30ca25a3c4f36f5cf6ca226807b7f864eb507a9332aa325b945
SHA512

7134d2e239f554bbc53f72d6756603aa32e8fdac63f033ad10da86daa5937d407f8f0730088ad602599b1a9a4d272bd5f4b7c348f168d3956553c8067d626ca3
SSDEEP

1536:a4Y2pMu5t2Rovbmt8Ppur4Oqf9NEMs9U+SNF8fyfhXWR7UsotO:TTau58RoSOBQ4zf9N3zNF8qfhGRY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73782a1bf445858f82380ee71a72a50

Files

b73782a1bf445858f82380ee71a72a50
.exe windows:4 windows x86 arch:x86

28de4f066f65a04fe638858f3ece6449

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
ReleaseMutex
GetStartupInfoA
VirtualFree
VirtualProtect
GetFileTime
FlushViewOfFile
GetBinaryTypeW
FreeEnvironmentStringsA
SetErrorMode
CreateMutexA
LoadLibraryA
AddAtomW
FlushFileBuffers
ExitThread
VirtualAlloc
CopyFileA
LockFileEx
CreateMutexW

msvcrt

_futime64
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_spawnlp
memcpy
strpbrk
fputc
_creat
_isctype
tan
strtok
_wenviron
_umask
_splitpath
_strrev
??_7exception@@6B@

comdlg32

ReplaceTextW
PageSetupDlgA
PrintDlgW
PageSetupDlgW
ChooseFontW
GetOpenFileNameW
LoadAlterBitmap
GetFileTitleA
dwOKSubclass
GetFileTitleW
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
CommDlgExtendedError
Ssync_ANSI_UNICODE_Struct_For_WOW
ChooseColorW
LoadAlterBitmap
WantArrows

winmm

mixerGetLineControlsW
joyGetDevCapsW
DrvGetModuleHandle
waveInClose
waveInUnprepareHeader

opengl32

glGetTexGendv
glHint
glLoadName
glEvalCoord1dv
glEndList
glRasterPos3d
glFrontFace
glTexCoord3sv
glColor3b
glPixelStoref

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28de4f066f65a04fe638858f3ece6449

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

comdlg32

winmm

opengl32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 21KB - Virtual size: 20KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 52B

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 21KB - Virtual size: 20KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 52B