b9dbbd2f76073c937ae34ccabc724dca

Sharing

Copy URL Twitter E-mail

General

Target

b9dbbd2f76073c937ae34ccabc724dca
Size

85KB
MD5

b9dbbd2f76073c937ae34ccabc724dca
SHA1

a545d9f0e65ea225677e26454ad30cde0d418e01
SHA256

7f3db225c4faa56efaa8ea80a93fbd2a7b70bb58f74782ad57e0b227ecc8d6e6
SHA512

d23f5345639e58dff9cf0257edfe0caf32b1bb06226de72faccc6636fbbead326921b825ed5e97b2ae1bb9a03228ccc5ffd48093cce887401be0527a8489759b
SSDEEP

1536:v6tLTUdt0r09m23CDj7+STN05xiSLRs4m8:StLYdt0Qm23M7+6GD3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dbbd2f76073c937ae34ccabc724dca

Files

b9dbbd2f76073c937ae34ccabc724dca
.exe windows:4 windows x86 arch:x86

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
SetScrollInfo
GetParent
WaitMessage
IsWindow
PostQuitMessage
IntersectRect
SetParent
OemToCharA
DestroyCursor
GetScrollRange
GetDC
DrawIconEx
GetWindowDC
FindWindowA
UpdateWindow
GetWindowThreadProcessId
IsCharUpperA
EnableMenuItem
RemovePropA
PeekMessageW
UnhookWindowsHookEx
IsMenu
RemoveMenu
MoveWindow
GetWindow
GetMenu
UnregisterClassA
GetPropA
CreateIcon
EnumWindows
GetScrollPos
GetLastActivePopup
IsWindowUnicode
GetMenuItemInfoA
GetCapture
SetActiveWindow
GetSysColor
DestroyWindow
GetKeyboardType
LoadBitmapA
IsDialogMessageA
IsDlgButtonChecked
SetClassLongA
MessageBoxA
SetScrollPos
SetPropA
GetSysColorBrush
RegisterWindowMessageA
GetScrollInfo
GetWindowTextLengthA
GetClientRect
CreateMenu
TranslateMessage
GetCursor
RegisterClipboardFormatA
CreatePopupMenu
SetWindowLongA
GetKeyboardLayout
GetWindowPlacement
wsprintfA

gdi32

GetTextAlign

version

VerInstallFileA
VerQueryValueA

kernel32

VirtualAllocEx
LockResource
FreeLibrary
LoadLibraryA
GetVersionExA
Sleep
CloseHandle
lstrlenW
GetCurrentProcessId
EnumCalendarInfoA
WaitForSingleObject
ExitProcess
CreateEventA
FormatMessageA
FindResourceA
FindFirstFileA
LocalReAlloc
SizeofResource
ReadFile
EnterCriticalSection
ResetEvent
HeapAlloc

Exports

Exports

yyB7Y@20
_hhrlznThK2QWRf@24
_QRu0ssuOjX
_lo9YKKVhR
_u77MBv@24
_9y_sDLT41u1@24
_yFfNE@4
_1TYBP6
_s78AW
3jxk6
zuzBM2RqUwNu@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

Imports

user32

gdi32

version

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 11KB - Virtual size: 42KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 11KB - Virtual size: 42KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB