b9f2bc2cac0846eb4c54c293458ee545

Sharing

Copy URL Twitter E-mail

General

Target

b9f2bc2cac0846eb4c54c293458ee545
Size

85KB
MD5

b9f2bc2cac0846eb4c54c293458ee545
SHA1

b65227f1e5f743de1c741343231f79a256690066
SHA256

6cfd37ae2f6563e0e925c9449688b2530a5f44b4de9dc71d0a669f8024f86789
SHA512

ea17f01c4736897e707f83153ab91f4b4297144d74195fb525188f046383aac4908de540e1402deefbd4ebbbb842bf4788d216df4ad95a8c433fdeb9e1405fbe
SSDEEP

1536:lDVsgE186zpcTobNDbxwAr/4THvO90tlEy4c0:BVsgClLb9br8vO900

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9f2bc2cac0846eb4c54c293458ee545

Files

b9f2bc2cac0846eb4c54c293458ee545
.exe windows:4 windows x86 arch:x86

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHQueryInfoKeyA
PathFileExistsA
SHGetValueA
SHSetValueA
PathIsDirectoryA
SHStrDupA

kernel32

VirtualAlloc
WideCharToMultiByte
lstrcpyA
FindClose
SetHandleCount
GetStdHandle
GetVersion
LocalAlloc
GetCommandLineA
LoadLibraryA
GlobalAlloc
FreeResource
FormatMessageA
VirtualFree
IsBadHugeReadPtr
GetModuleHandleA
FindFirstFileA
VirtualQuery
ExitProcess
GetTickCount
GetLocalTime
ExitThread

user32

EqualRect
FillRect
GetMenuStringA
DestroyIcon
SetScrollInfo
InsertMenuItemA
EnableMenuItem
SetParent
CharNextA
MapVirtualKeyA
DrawFrameControl
EnableWindow
GetFocus
IsWindowEnabled
SetClassLongA
GetForegroundWindow
GetLastActivePopup
GetWindowTextLengthA
CharLowerA
MoveWindow
CreateMenu
InvalidateRect
DispatchMessageA
SetCursor
EmptyClipboard
GetSystemMetrics
GetMenu
SetFocus
CreateIcon
DefMDIChildProcA
GetKeyboardLayoutList
IsRectEmpty
RegisterClassA
GetCursor
InsertMenuA
EnableScrollBar
WaitMessage
DefFrameProcA
OpenIcon
GetScrollInfo
GetParent
GetDesktopWindow
IsZoomed
SetWindowTextA
SetActiveWindow
CharToOemA
GetCapture
LoadCursorA
PostMessageA
GetWindowRect
MessageBeep
GetMenuState
ClientToScreen
TrackPopupMenu
IsDialogMessageA
GetWindowPlacement
CharUpperA
OpenClipboard
EnumWindows
SetScrollPos
GetKeyboardState

Exports

Exports

_p8tcTHc3
_zjC50N7Rr@4
_AGgE6pOO@12

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc975be1bfc429af8a63fa4182a706fc

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 11KB - Virtual size: 34KB

.edata Size: 46KB - Virtual size: 45KB

.idata Size: 4KB - Virtual size: 3KB

.bdata Size: 512B - Virtual size: 482B

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 11KB - Virtual size: 34KB

.edata
Size: 46KB - Virtual size: 45KB

.idata
Size: 4KB - Virtual size: 3KB

.bdata
Size: 512B - Virtual size: 482B

.rsrc
Size: 9KB - Virtual size: 8KB