b84e13302d810be512beb1e4e719d96c

Sharing

Copy URL Twitter E-mail

General

Target

b84e13302d810be512beb1e4e719d96c
Size

498KB
MD5

b84e13302d810be512beb1e4e719d96c
SHA1

e137a9f6fb1492f0ec408716df3bebf45e8f2f5f
SHA256

0eddf8ad3c5a05010e530067b84e46fae5d2a134609e0369c934108a3a6fbdda
SHA512

290a101c2d874e25235bac48ef2c9dc27fe9c0e5d4e3d36637589d3c0cec40872b5c06524698d8bbeb7d9e3bfcf7a89c4ee34172c50db6d6e8a4b56b65faadfd
SSDEEP

12288:gdZh0SSlkPPv2Q51FWoLCJhueTBz1TR/yLGbr7PJIqEb:gdx/P2Q5jCJlz7X2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b84e13302d810be512beb1e4e719d96c

Files

b84e13302d810be512beb1e4e719d96c
.exe windows:4 windows x86 arch:x86

be35fbd32b8281f994e01cea9694dcd2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCombineUrlW
GetUrlCacheConfigInfoA
FtpRemoveDirectoryW
UrlZonesDetach
InternetConfirmZoneCrossingW

comctl32

InitCommonControlsEx

kernel32

TransactNamedPipe
GetCurrentThread
HeapReAlloc
DeleteCriticalSection
GetCommandLineA
InterlockedExchange
CreateMutexA
GetStringTypeW
InterlockedIncrement
TlsFree
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
GetSystemTime
WaitForMultipleObjectsEx
SetStdHandle
CreateMutexW
HeapAlloc
EnterCriticalSection
SetLastError
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcess
GetVersion
GetProcAddress
OpenSemaphoreW
GetStartupInfoW
GetLocalTime
EnumCalendarInfoExW
TerminateProcess
GetModuleFileNameW
GetStartupInfoA
CloseHandle
GetFileType
ExitProcess
GetSystemTimeAsFileTime
GetStringTypeA
HeapCreate
LCMapStringW
CopyFileExA
FreeEnvironmentStringsW
EnumDateFormatsExW
GetEnvironmentStringsW
HeapDestroy
GetModuleFileNameA
SetCurrentDirectoryA
GetStdHandle
GetTimeZoneInformation
WriteFile
SetFilePointer
OpenMutexA
VirtualAlloc
LocalReAlloc
HeapFree
SetHandleCount
WideCharToMultiByte
SuspendThread
FoldStringW
ReadFile
LoadLibraryA
ReleaseMutex
FindClose
CompareStringW
PulseEvent
FreeEnvironmentStringsA
GetTickCount
InitializeCriticalSection
GetLastError
TlsAlloc
IsBadWritePtr
GetCommandLineW
GetModuleHandleA
GetCurrentProcessId
GetTempPathA
LCMapStringA
TlsSetValue
CompareStringA
GetEnvironmentStrings
MoveFileExA
LoadResource
GetCPInfo
lstrcatA
SetTimeZoneInformation
RtlUnwind
SetEnvironmentVariableA
GetSystemDirectoryA
FlushFileBuffers
VirtualQuery
VirtualFree
TlsGetValue
QueryPerformanceCounter

user32

MessageBoxA
DlgDirListComboBoxW
CountClipboardFormats
GetCursorInfo
DdeAccessData
RegisterClassExA
CreateMDIWindowW
DefDlgProcW
RegisterClassA
SetMenuItemInfoA
UnpackDDElParam
CreateDialogIndirectParamA
DdeKeepStringHandle
GetMenuStringW
SwitchDesktop
BroadcastSystemMessage

Sections

.text
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

be35fbd32b8281f994e01cea9694dcd2

Headers

File Characteristics

Imports

wininet

comctl32

kernel32

user32

Sections

.text Size: 170KB - Virtual size: 169KB

.rdata Size: 4KB - Virtual size: 26KB

.data Size: 312KB - Virtual size: 311KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 170KB - Virtual size: 169KB

.rdata
Size: 4KB - Virtual size: 26KB

.data
Size: 312KB - Virtual size: 311KB

.rsrc
Size: 11KB - Virtual size: 10KB