b97f51d223cca9918d6b14a37100bda6

Sharing

Copy URL Twitter E-mail

General

Target

b97f51d223cca9918d6b14a37100bda6
Size

85KB
MD5

b97f51d223cca9918d6b14a37100bda6
SHA1

45b957708423ada2501f3ea157480651f2e05150
SHA256

4f779ecda065046f74a050d988a71586e9c73550669acaf3121ea7c49b15117d
SHA512

57c5c988227f0c9a2aac2a328685c082adaaf0e72b52b9dfc7c3a67ec93e347105fca3799b8e82aa5842fb59cc97f39a7b407edadf28f25164a0307f5219d054
SSDEEP

1536:v6tLTUdt0/09m23CDj7+STN05xiSLRs4m8:StLYdt0sm23M7+6GD3l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97f51d223cca9918d6b14a37100bda6

Files

b97f51d223cca9918d6b14a37100bda6
.exe windows:4 windows x86 arch:x86

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
SetScrollInfo
GetParent
WaitMessage
IsWindow
PostQuitMessage
IntersectRect
SetParent
OemToCharA
DestroyCursor
GetScrollRange
GetDC
DrawIconEx
GetWindowDC
FindWindowA
UpdateWindow
GetWindowThreadProcessId
IsCharUpperA
EnableMenuItem
RemovePropA
PeekMessageW
UnhookWindowsHookEx
IsMenu
RemoveMenu
MoveWindow
GetWindow
GetMenu
UnregisterClassA
GetPropA
CreateIcon
EnumWindows
GetScrollPos
GetLastActivePopup
IsWindowUnicode
GetMenuItemInfoA
GetCapture
SetActiveWindow
GetSysColor
DestroyWindow
GetKeyboardType
LoadBitmapA
IsDialogMessageA
IsDlgButtonChecked
SetClassLongA
MessageBoxA
SetScrollPos
SetPropA
GetSysColorBrush
RegisterWindowMessageA
GetScrollInfo
GetWindowTextLengthA
GetClientRect
CreateMenu
TranslateMessage
GetCursor
RegisterClipboardFormatA
CreatePopupMenu
SetWindowLongA
GetKeyboardLayout
GetWindowPlacement
wsprintfA

gdi32

GetTextAlign

version

VerInstallFileA
VerQueryValueA

kernel32

VirtualAllocEx
LockResource
FreeLibrary
LoadLibraryA
GetVersionExA
Sleep
CloseHandle
lstrlenW
GetCurrentProcessId
EnumCalendarInfoA
WaitForSingleObject
ExitProcess
CreateEventA
FormatMessageA
FindResourceA
FindFirstFileA
LocalReAlloc
SizeofResource
ReadFile
EnterCriticalSection
ResetEvent
HeapAlloc

Exports

Exports

yyB7Y@20
_hhrlznThK2QWRf@24
_QRu0ssuOjX
_lo9YKKVhR
_u77MBv@24
_9y_sDLT41u1@24
_yFfNE@4
_1TYBP6
_s78AW
3jxk6
zuzBM2RqUwNu@16

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03cec2c9f3bafaf0cca8ca02fb3fb186

Headers

File Characteristics

Imports

user32

gdi32

version

kernel32

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 11KB - Virtual size: 42KB

.data Size: 50KB - Virtual size: 50KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 11KB - Virtual size: 42KB

.data
Size: 50KB - Virtual size: 50KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB