b9b65a59fc4711eb17d602eeaae81824

Sharing

Copy URL Twitter E-mail

General

Target

b9b65a59fc4711eb17d602eeaae81824
Size

135KB
MD5

b9b65a59fc4711eb17d602eeaae81824
SHA1

6d878b81b094a70b0f4d2865ef6ff485c1f9d6db
SHA256

2c2f8cd57c8e4e0c2ff870bb617ec28bd0e88b6948e89ba296ae4d7afb06ebc1
SHA512

a054b13afd8d44e0ff8fd29bec86f9ae0c92a7d2a38e0daa025d8118fb469a1e7ac7b99706aafd1873458e3b15127d0049a3be15ea7052399b7c3f3a1e8ec7bb
SSDEEP

1536:nuSM379pilzy4aCUBGbrufhif3ba/Qtps4zWeYXuOtMlR:nu79WdaC2urufq33UeYuOs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9b65a59fc4711eb17d602eeaae81824

Files

b9b65a59fc4711eb17d602eeaae81824
.dll windows:4 windows x86 arch:x86

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileW
DeleteFileA
GetFileTime
FindAtomA
OpenFile
CopyFileA
ReadConsoleA
CreateProcessA
GetLastError
CopyFileExW
WriteFile
GlobalFree
GetStdHandle
CreateThread
GetCommandLineA
CopyFileA
GetComputerNameA
WriteFile
GetCPInfo
FindFirstFileA
ReadConsoleA
GetFileSize
OpenFile
GetStdHandle
OpenFileMappingA
ReadFile
DeleteFileA
GetConsoleMode
FindAtomA
DeleteFileW
DeleteAtom
DeleteFileA
CopyFileA
GetComputerNameA
GetFileTime
ReadConsoleA
CopyFileExA
CopyFileW
GetCommandLineA
ExitThread
OpenFileMappingA
FindAtomA

user32

CalcMenuBar
DialogBoxParamW
CloseWindow
GetCursor
DrawTextA
GetDC
AlignRects
CopyImage
InsertMenuA
GetWindowTextLengthA
DrawTextW
CopyImage
AlignRects
GetMenu
DrawIcon
BlockInput
CopyRect
GetDlgItem
GetFocus
AppendMenuW
IsWindow
GetWindowTextLengthA
CalcMenuBar
EndDialog
CopyIcon
AppendMenuA

gdi32

DeleteDC
AbortPath
AddFontResourceW
SetTextColor
DeleteObject
AddFontResourceA
RestoreDC
AddFontResourceExA
AddFontResourceExW
ClearBitmapAttributes
GetBitmapBits
GetPixel
GetPixel
AddFontMemResourceEx
GetBrushOrgEx
BeginPath
GetBrushOrgEx
CreateSolidBrush
SetTextColor
AddFontResourceA
AddFontResourceExW
CancelDC
DeleteObject
AddFontResourceW
GetClipBox
ClearBrushAttributes
AddFontMemResourceEx
ExcludeClipRect
CloseFigure
GetBitmapBits
GetCurrentPositionEx
ClearBitmapAttributes
AddFontResourceExA
GetBrushOrgEx
ExtTextOutA
CloseFigure
CreateSolidBrush
GetPixel
BeginPath
AddFontMemResourceEx
ClearBitmapAttributes
AbortPath
ExtTextOutA
GetPixel
AddFontResourceW
GetClipBox
RestoreDC
GetBitmapBits
BeginPath
AddFontResourceExA
GetPixel
ClearBrushAttributes
SetTextColor
AddFontResourceExW
AddFontResourceTracking
GetBrushOrgEx
AddFontMemResourceEx
DeleteDC
CreateSolidBrush
AddFontResourceA
AbortPath

comctl32

ImageList_Read
ImageList_DragMove
ImageList_Destroy
ImageList_GetIconSize
ImageList_DragEnter
ImageList_DragShowNolock
InitCommonControls
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Replace
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_GetImageRect
ImageList_LoadImage
InitCommonControls
ImageList_DrawIndirect
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 393B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3034835fedd595bcace2da5a44eb7d25

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 102KB - Virtual size: 102KB

.bbs Size: - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 3KB

.tls Size: - Virtual size: 393B

.rdata Size: 512B - Virtual size: 197B

.rsrc Size: 1024B - Virtual size: 52KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 102KB - Virtual size: 102KB

.bbs
Size: - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 393B

.rdata
Size: 512B - Virtual size: 197B

.rsrc
Size: 1024B - Virtual size: 52KB