b980145d888b56c6bf52c6c9332098ce

Sharing

Copy URL

Twitter E-mail

General

Target

b980145d888b56c6bf52c6c9332098ce
Size

128KB
MD5

b980145d888b56c6bf52c6c9332098ce
SHA1

3b445171c8f5568d1b1c814870333c7813430b5e
SHA256

5152c064cd31273a82ce31e6ac60851b2c9f71d12f5251db3ca58f25edbeea6b
SHA512

64d8ef065988c0903f73822d003c696ec35f61b71c7f42131a38068c238c05c14333a9bf39d06140aa4df16cb809bfd3d70596963e83643c57a685344ca6ab54
SSDEEP

3072:rhY8WFCZbPwrjpl+8X3oOcMJ0OYNAKiJ37k:rhYGSf1X3vc83k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b980145d888b56c6bf52c6c9332098ce

Files

b980145d888b56c6bf52c6c9332098ce
.exe windows:4 windows x86 arch:x86

4a6bed76f61db59f9bd0390406fcc8e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\temp\temp.pdb

Imports

kernel32

GetSystemTime
Sleep
InterlockedIncrement
GlobalReAlloc
LocalFree
GetTempPathW
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
ResumeThread
GetTickCount
SystemTimeToFileTime
ResetEvent
SetFirmwareEnvironmentVariableA
CreateMutexA
RemoveDirectoryW
LoadLibraryW
GetLastError
VirtualProtect
GetSystemInfo
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
HeapReAlloc
LoadLibraryA
VirtualQuery

user32

PostMessageA
ShowWindow
EnumWindows
GetSystemMetrics
SetActiveWindow
FindWindowA
GetFocus
LoadBitmapA

winmm

joySetCapture
midiInClose
midiDisconnect

Sections

.TTEXT
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a6bed76f61db59f9bd0390406fcc8e7

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

winmm

Sections

.TTEXT Size: 4KB - Virtual size: 2KB

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 20KB - Virtual size: 19KB

.TTEXT
Size: 4KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 20KB - Virtual size: 19KB