b755983710c069ff6c67c62b08c4b9bf

General

Target

b755983710c069ff6c67c62b08c4b9bf
Size

21KB
MD5

b755983710c069ff6c67c62b08c4b9bf
SHA1

e05676e1328903f7e9a44f95abd09f2ce1759deb
SHA256

ae8315d6536c56b016ea83964cee9f7254e5dc70bdc59701e757268b97e1f0c8
SHA512

756e46e1e594917a8e5ccb0dc32197c0befc7494d4791f24a404e29235d4e34c91062cde7df7ad332a09b1f83091931918833e4b429d1b51cfeb93d955420f00
SSDEEP

384:FrxfdfXHqsAK7ym1HPGJL1bRAnbc2+GXrZ2PT:X1fZAov1vGJL9m3XrZ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b755983710c069ff6c67c62b08c4b9bf

Files

b755983710c069ff6c67c62b08c4b9bf
.dll windows:4 windows x86 arch:x86

11d21d871d0dcf2229f1e6961c21af2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadProcessMemory
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
LoadLibraryA
IsBadReadPtr
Sleep
TerminateThread
GetPrivateProfileStringA
GetCurrentProcessId
RaiseException
WriteFile
Process32Next
Process32First
CreateToolhelp32Snapshot
WriteProcessMemory
WideCharToMultiByte
ResumeThread
GetCurrentProcess
VirtualProtectEx
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetTempPathA
CreateFileA
ReadFile
CloseHandle
DeleteFileA
CreateThread
OpenMutexA
GetCurrentThread
CreateMutexA

user32

FindWindowA
GetWindowThreadProcessId
GetAsyncKeyState
GetKeyState
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

imagehlp

ImageUnload
ImageLoad

msvcrt

_strlwr
free
_initterm
malloc
_adjust_fdiv
_stricmp
strrchr
strncpy
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
sscanf
strstr

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11d21d871d0dcf2229f1e6961c21af2a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

imagehlp

msvcrt

wininet

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 3KB

sdata Size: 512B - Virtual size: 12B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 3KB

sdata
Size: 512B - Virtual size: 12B

.reloc
Size: 2KB - Virtual size: 1KB