b9e36e152cc7c90c5867d2f0b193a988

General

Target

b9e36e152cc7c90c5867d2f0b193a988
Size

130KB
MD5

b9e36e152cc7c90c5867d2f0b193a988
SHA1

f41247c42dc18ead863281cef5c086aa5c042897
SHA256

f4f22cfd3ad0ca6fc171a543b0ab3a0b1524fb6389cacfed90c13ab63b308c31
SHA512

4f80c1905515db2f43b1b803b885d53fd41b41e933c0c04a68ee30554089444cc0cb94a23585b7157b6a67d05f62b4631b200102bb8d6b74042a5be6b1164470
SSDEEP

3072:Sc0mir9F7HjPWdscmbwJ03NuxwkKXW/HQx7l7A:SLyVmW0UDP4x7l7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e36e152cc7c90c5867d2f0b193a988

Files

b9e36e152cc7c90c5867d2f0b193a988
.exe windows:5 windows x86 arch:x86

e0b25a4cdae1a0d4bdfb8e8514275112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\bmJwgdsD\fLzjoqFxi\KJxOnaF\ynmWVlNkly.qaE

Imports

user32

ArrangeIconicWindows
RegisterHotKey
GetActiveWindow
VkKeyScanW
GetMessagePos
DefWindowProcA
SetScrollInfo
GetKeyState
GetDesktopWindow
DrawFrameControl
GetClassInfoW
IsCharAlphaW

kernel32

LeaveCriticalSection
GetSystemTimeAsFileTime
LoadLibraryExA
PulseEvent
GetExitCodeThread
lstrlenA
LocalFree
FlushFileBuffers
GetSystemDirectoryA
GetStringTypeA
IsValidLocale
GetThreadPriority
LocalAlloc
SetPriorityClass

gdi32

LineTo
GetDIBColorTable
SelectPalette
EndDoc
CreateEllipticRgnIndirect
TextOutW
CreatePatternBrush

Exports

Exports

?OvizrrvbexlegNgp@@YGPAFH@Z
?ZuzosUcdsraFJ@@YGGGPAJ@Z
?CozccYbotpxpzyhnluxc@@YGF_NPAF@Z
?PfpstPEkdnjvi@@YGMG@Z
?Gabheodsvemidcrs@@YGPAJPA_N@Z
?VfoasaprjvaaxydKrspfwd@@YGXFG@Z
?TtfwxWmduper@@YGXPAKF@Z

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0b25a4cdae1a0d4bdfb8e8514275112

Headers

File Characteristics

PDB Paths

Imports

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 9KB - Virtual size: 281KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 97KB - Virtual size: 97KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 9KB - Virtual size: 281KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 97KB - Virtual size: 97KB

.reloc
Size: 2KB - Virtual size: 2KB