b753282823eb3874a848abe1b3557ef8

Sharing

Copy URL

Twitter E-mail

General

Target

b753282823eb3874a848abe1b3557ef8
Size

14KB
MD5

b753282823eb3874a848abe1b3557ef8
SHA1

9ee0b6d3ba3367e725805ed106f01d5eacecae9f
SHA256

5677bf69b94eab8ab322d8387266323c5c12dd5f9b9be930f943d0383f4f4e14
SHA512

ca2a0d457f96e2daffac41acfadc238ebe2cf3fe76b0b6cc09218c48bf8f0d7b0ecc2b5ee66fbc6439bebf028932c3cffa5f81c4111ff49288aae5be11b248c8
SSDEEP

192:nmc4mlNFa60yX1Rm+zkvPDewibmymlcjIieTI+/Uf6YErslMQvmj73dKcoE1L4ps:tBlNFamGmkTFtlcKcCprQzuPdLoEVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b753282823eb3874a848abe1b3557ef8

Files

b753282823eb3874a848abe1b3557ef8
.exe windows:4 windows x86 arch:x86

5b933ddda3d867fee2df6cef4a82c679

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
Sleep
SetThreadContext
ResumeThread
ReadProcessMemory
GetThreadContext
GetTempPathA
ExitProcess
CreateProcessA
CloseHandle
GetCurrentThreadId
GetLastError
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap

shell32

ShellExecuteA

user32

CharNextA
SendMessageA
PostMessageA
MoveWindow
FindWindowExA
FindWindowA

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XEK
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

upx
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b933ddda3d867fee2df6cef4a82c679

Headers

File Characteristics

Imports

kernel32

shell32

user32

Sections

CODE Size: 9KB - Virtual size: 8KB

DATA Size: 512B - Virtual size: 180B

XEK Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.tls Size: - Virtual size: 4B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 1024B - Virtual size: 568B

.rsrc Size: 512B - Virtual size: 512B

upx Size: 512B - Virtual size: 4KB

CODE
Size: 9KB - Virtual size: 8KB

DATA
Size: 512B - Virtual size: 180B

XEK
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.tls
Size: - Virtual size: 4B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 1024B - Virtual size: 568B

.rsrc
Size: 512B - Virtual size: 512B

upx
Size: 512B - Virtual size: 4KB