b9649c12afd057fa06f113e68fbf27b5

Sharing

Copy URL Twitter E-mail

General

Target

b9649c12afd057fa06f113e68fbf27b5
Size

80KB
MD5

b9649c12afd057fa06f113e68fbf27b5
SHA1

7a186264d1d74670d20b230742cddae9a488f115
SHA256

6bbbf36fcce63e5eee365c2e7da3b069835d7a3655f7514fcfa2671828560aa5
SHA512

604f2ef5a8f1ed8356f6f894dd349f0480ce54c0335ee09561645555caa67dc6da9e10ce214641e14a0f045ef12d72578398bb8b74f11da7ad317a26be5cb40e
SSDEEP

768:SJ0tN2UBeu1XmsPFJU8/xe83sFvg2yRumI9l3TY4VNPzfWmYjvBuQ3cNc7mph4RF:SCFJtxe832go9hTYwPJkb3ctqRk44ml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9649c12afd057fa06f113e68fbf27b5

Files

b9649c12afd057fa06f113e68fbf27b5
.exe windows:4 windows x86 arch:x86

e15ea4be822f7ac7f2e1898e47bd6b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardType
GetKeyboardLayoutNameA
LoadIconA
CharLowerA
SetWindowTextA
SetWindowLongA
GetWindow
EnableWindow
GetSystemMetrics
DrawEdge
IsWindowVisible
IsIconic
DrawMenuBar
EmptyClipboard
OpenClipboard
ReleaseCapture
CharNextW
RemovePropA
InflateRect
GetMenuItemCount
LoadCursorA
RegisterClassA
DrawTextA
FrameRect
SetWindowPlacement
MessageBeep
IsDialogMessageW
GetClassLongA
ClientToScreen
GetKeyboardState
IsCharUpperA
GetMenu
GetDC
GetKeyState
IsDlgButtonChecked
GetMenuItemID
EqualRect
RegisterClipboardFormatA
SystemParametersInfoA
IsWindow
GetForegroundWindow
LoadKeyboardLayoutA
AdjustWindowRectEx
PeekMessageW
UnregisterClassA
ShowWindow
DrawIconEx
LoadStringA
SetWindowLongW
DrawAnimatedRects
DefFrameProcA
GetWindowTextLengthA
CallNextHookEx
GetCapture
GetParent
GetSubMenu
KillTimer
CheckMenuItem
GetPropA
GetClientRect
SetClipboardData
DestroyWindow

oleaut32

SafeArrayGetElement
SafeArrayGetUBound
OleLoadPicture
SysReAllocStringLen
SafeArrayPtrOfIndex

gdi32

GetBkColor

kernel32

FormatMessageA
ResetEvent
GetUserDefaultLCID
ExitProcess
FindFirstFileA
HeapDestroy
GetVersionExA
GetStdHandle
CompareStringA
GlobalDeleteAtom
LoadLibraryA
Sleep
InitializeCriticalSection
GetCurrentThreadId
GetFileSize
SetFilePointer
GetEnvironmentStrings
FreeResource
SetHandleCount
GetVersion
GlobalAddAtomA
VirtualAllocEx
GetTickCount
SetErrorMode
GlobalAlloc

Exports

Exports

2b05hDr

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 841B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e15ea4be822f7ac7f2e1898e47bd6b50

Headers

File Characteristics

Imports

user32

oleaut32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 41KB

.data Size: 49KB - Virtual size: 48KB

.edata Size: 1024B - Virtual size: 841B

.badata Size: 512B - Virtual size: 124B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 41KB

.data
Size: 49KB - Virtual size: 48KB

.edata
Size: 1024B - Virtual size: 841B

.badata
Size: 512B - Virtual size: 124B

.rsrc
Size: 8KB - Virtual size: 8KB