b9ed8c931e90435db7a4615ceb3fc7c0

Sharing

Copy URL

Twitter E-mail

General

Target

b9ed8c931e90435db7a4615ceb3fc7c0
Size

186KB
MD5

b9ed8c931e90435db7a4615ceb3fc7c0
SHA1

614176006fc4210c302e4722b6aa7797a41a1152
SHA256

635c78bc656413d6e25ea92f1cad486f6e696778b3f95617160b33b50aa6a0b5
SHA512

fe94593428080dcffaad3ccc543201927a1ab5d0012654f1c5fcb483a546ec38d1c12c01e73aacd33f164ccb78b17911c4f8a5dfc8a985034967227728de51c1
SSDEEP

3072:VVlXkXqU7dxqBomH6lvpgQdpwjna7VDR4qS6BcBYdDPZMpchHl:5OqUhxAo9lGQdiba75Rr1nDPCk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9ed8c931e90435db7a4615ceb3fc7c0

Files

b9ed8c931e90435db7a4615ceb3fc7c0
.exe windows:4 windows x86 arch:x86

391f0295e843cdb274f8eb1a8ded2e33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

gdi32

CreateCompatibleDC
CreatePalette
StartPage
SetStretchBltMode
ExtEscape
SetROP2
CreateBitmap
CombineRgn
EndPage
SelectPalette
SetPolyFillMode
GetClipBox
ModifyWorldTransform
DeleteDC
CreatePatternBrush
SetWorldTransform
RealizePalette
CreateRectRgn
ExtSelectClipRgn
GetRegionData
GetRgnBox
MoveToEx
CreateICW
GetDeviceCaps
CloseFigure
StrokePath
PolylineTo
SetDIBits
DeleteObject
EndDoc
RestoreDC
Escape
GetCurrentObject
CreateBrushIndirect
GetDIBColorTable
CreateCompatibleBitmap
CreateDIBSection
PolyBezierTo
ExtCreatePen
SetMiterLimit
BitBlt
BeginPath
SelectClipRgn
SetBrushOrgEx
AbortDoc
PatBlt
SelectObject
GetGraphicsMode
GetWorldTransform
StretchBlt
GetStockObject
CreateDCW
EqualRgn
CreatePolyPolygonRgn
SaveDC
SetGraphicsMode
OffsetRgn
FillPath
IntersectClipRect
ResetDCW
StretchDIBits
GetViewportOrgEx
EndPath
StartDocW
LineTo
Rectangle
SelectClipPath
GetObjectA
PolyDraw

user32

OffsetRect
WindowFromDC
ScrollWindowEx
GetDesktopWindow
MonitorFromWindow
RegisterClassA
CreateWindowExA
GetClientRect
GetSystemMetrics
LoadIconA
GetDC
DefWindowProcA
DestroyWindow
GetMonitorInfoA
ReleaseDC
MonitorFromPoint
SetWindowPos
GetActiveWindow
LoadCursorA
CharNextW
SetActiveWindow
GetWindowRect
EnumDisplayMonitors
UnregisterClassA

msimg32

AlphaBlend

shlwapi

PathRemoveFileSpecA
PathAppendA

ole32

CLSIDFromProgID
CoUninitialize
OleInitialize
OleFlushClipboard
CoGetProcessIdentifier
OleUninitialize
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoTaskMemFree
CoRevokeClassObject
CoInitialize
OleIsCurrentClipboard
CoFreeUnusedLibraries
CoTaskMemAlloc
CoRegisterMessageFilter
CLSIDFromString

kernel32

LoadLibraryA
TlsFree
CreateFileA
ReadFile
ReleaseSemaphore
lstrlenW
GetProcAddress
GetCurrentThread
LocalAlloc
FreeLibrary
GetDateFormatW
GetCurrentProcess
GetCalendarInfoW
GlobalUnlock
GlobalAlloc
GetACP
GlobalLock
GetLocalTime
GetWindowsDirectoryA
DeleteFileW
GetVersionExA
GetModuleHandleA
GetTimeFormatW
GetTimeFormatA
CloseHandle
TerminateProcess
Sleep
TlsSetValue
CreateSemaphoreA
GetProfileStringW
InterlockedIncrement
ReleaseMutex
FindClose
GetCurrentDirectoryA
IsProcessorFeaturePresent
EnumResourceNamesA
lstrcmpW
InterlockedCompareExchange
EnterCriticalSection
FindFirstFileA
MultiByteToWideChar
GetSystemDefaultLCID
GetFileSize
WaitForSingleObject
ExitProcess
GetLastError
GetCurrentProcessId
QueryPerformanceCounter
GetTempPathW
TlsGetValue
GetSystemTimeAsFileTime
GetModuleFileNameA
SetThreadPriority
DeleteCriticalSection
GetTickCount
WideCharToMultiByte
LeaveCriticalSection
GetThreadPriority
InitializeCriticalSection
GetEnvironmentVariableW
GlobalFree
GetFileTime
InterlockedExchange
UnhandledExceptionFilter
CreateMutexA
IsDebuggerPresent
FindNextFileA
GetThreadLocale
GlobalSize
GetDateFormatA
GetCurrentThreadId
SetCurrentDirectoryA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetLocaleInfoA
GetSystemInfo
GetUserDefaultLangID
RaiseException

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

391f0295e843cdb274f8eb1a8ded2e33

Headers

File Characteristics

Imports

advapi32

gdi32

user32

msimg32

shlwapi

ole32

kernel32

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: 76KB - Virtual size: 76KB

.edata Size: 1024B - Virtual size: 244KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: 76KB - Virtual size: 76KB

.edata
Size: 1024B - Virtual size: 244KB