b9650f8c18f727f3553857de53b66599

Sharing

Copy URL Twitter E-mail

General

Target

b9650f8c18f727f3553857de53b66599
Size

85KB
MD5

b9650f8c18f727f3553857de53b66599
SHA1

0beb3539f1137563ca18ba7b6fc599c2a19659c0
SHA256

3fb186509a313dedb6ef3417948666dcf704e1a3ceca62992c9dc4efff911f74
SHA512

65213018facdbacaa5a4967b9c779f84c9a5e46e9567bba5164103e086cd109b0c1fcd64ca00bb3d9a4e88db4126c58e0996cd2760491fb088bb1130186cf953
SSDEEP

1536:v6tLTUdt0b09m23CDj7+STN05xiSLRs4m8:StLYdt0gm23M7+6GD3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9650f8c18f727f3553857de53b66599

Files

b9650f8c18f727f3553857de53b66599
.exe windows:4 windows x86 arch:x86

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
SetScrollInfo
GetParent
WaitMessage
IsWindow
PostQuitMessage
IntersectRect
SetParent
OemToCharA
DestroyCursor
GetScrollRange
GetDC
DrawIconEx
GetWindowDC
FindWindowA
UpdateWindow
GetWindowThreadProcessId
IsCharUpperA
EnableMenuItem
RemovePropA
PeekMessageW
UnhookWindowsHookEx
IsMenu
RemoveMenu
MoveWindow
GetWindow
GetMenu
UnregisterClassA
GetPropA
CreateIcon
EnumWindows
GetScrollPos
GetLastActivePopup
IsWindowUnicode
GetMenuItemInfoA
GetCapture
SetActiveWindow
GetSysColor
DestroyWindow
GetKeyboardType
LoadBitmapA
IsDialogMessageA
IsDlgButtonChecked
SetClassLongA
MessageBoxA
SetScrollPos
SetPropA
GetSysColorBrush
RegisterWindowMessageA
GetScrollInfo
GetWindowTextLengthA
GetClientRect
CreateMenu
TranslateMessage
GetCursor
RegisterClipboardFormatA
CreatePopupMenu
SetWindowLongA
GetKeyboardLayout
GetWindowPlacement
wsprintfA

gdi32

GetTextAlign

version

VerInstallFileA
VerQueryValueA

kernel32

VirtualAllocEx
LockResource
FreeLibrary
LoadLibraryA
GetVersionExA
Sleep
CloseHandle
lstrlenW
GetCurrentProcessId
EnumCalendarInfoA
WaitForSingleObject
ExitProcess
CreateEventA
FormatMessageA
FindResourceA
FindFirstFileA
LocalReAlloc
SizeofResource
ReadFile
EnterCriticalSection
ResetEvent
HeapAlloc

Exports

Exports

yyB7Y@20
_hhrlznThK2QWRf@24
_QRu0ssuOjX
_lo9YKKVhR
_u77MBv@24
_9y_sDLT41u1@24
_yFfNE@4
_1TYBP6
_s78AW
3jxk6
zuzBM2RqUwNu@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

Imports

user32

gdi32

version

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 11KB - Virtual size: 42KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 11KB - Virtual size: 42KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB