bb219b479a1f5c90a2a83c1a2b963e08

Sharing

Copy URL Twitter E-mail

General

Target

bb219b479a1f5c90a2a83c1a2b963e08
Size

141KB
MD5

bb219b479a1f5c90a2a83c1a2b963e08
SHA1

c7bca0adda9dcebdf737842045baa461ebddae03
SHA256

85f72663034dbef599fb333fa70479137529203aaa21f9b77edddc147da1aec6
SHA512

378335864499deda3abb5ccad52c3efd0819b28c9746b71346dcbdd30ec6cd8abc0c6013ecbdd4d3dab46994422eef683c6869efc59b27fd53982e5853ace6be
SSDEEP

3072:CS+Vy8n6eC3QwcuAn9hiTk2UwxcLYfHZOThiMGkjKPo6YTCYEcoVoxk:CSB86eCAUAnbqkzLYfoTekjCYTIT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb219b479a1f5c90a2a83c1a2b963e08

Files

bb219b479a1f5c90a2a83c1a2b963e08
.exe windows:5 windows x86 arch:x86

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCurrentDirectoryA
VirtualAlloc
GetLastError
lstrcpynA
OutputDebugStringA
TerminateThread
LoadLibraryW
GetStartupInfoW
VirtualFree
CreateFiberEx
GetACP
SetEvent
GetConsoleMode
GetModuleFileNameW
SetHandleCount
GetEnvironmentStringsW
GetThreadLocale
GetStdHandle
CloseHandle
GetModuleHandleA
GetCurrentProcess
ExitThread
GlobalAlloc
EndUpdateResourceA
GetProcAddress
lstrcpyW
FreeEnvironmentStringsA
DosDateTimeToFileTime
GetTimeFormatW
VirtualProtect
CreateFiber
FileTimeToSystemTime
GetFileAttributesA

msvcrt

wcstok
atoi
memset
toupper
printf
_wtoi
wcsrchr
wcsncpy
memcpy
strncpy
wcstol
_wcsnicmp
_wcmdln
towupper
_XcptFilter
__CxxFrameHandler
wcscmp
_wcsicmp
swscanf
tmpnam
__setusermatherr

user32

ReleaseDC
RegisterClassA
wsprintfW
GetCursorPos
DestroyWindow
LoadCursorA
DispatchMessageW
SetScrollPos
IsWindow
MapWindowPoints
LoadImageW
SendMessageA
DialogBoxParamA
GetMenuItemCount
CheckDlgButton
GetParent
ClientToScreen
BeginPaint
SendMessageW
GetProcessWindowStation
UnregisterClassW
CopyRect
LoadCursorW
LoadMenuW
SetCapture
ScreenToClient
ReleaseCapture

gdi32

CreateBitmap
CreateFontIndirectW
TranslateCharsetInfo
SetTextColor
CreateCompatibleDC
StretchBlt
SetBkMode
RestoreDC
Rectangle
PatBlt

opengl32

glColor4f
glTexCoord2dv
glFogfv
GlmfBeginGlsBlock
glColor4i
wglShareLists
glColor3ui
glStencilMask
glColor4d
glTexCoord2d

Exports

Exports

VilJlhuQpanqTzh
YaNgetjMbklbzIawgzWns
AeKzzenVyzzq

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 115B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a56d2704ed1c8c9842aac46fe7a7a698

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

opengl32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.crt Size: 512B - Virtual size: 72B

.rdata Size: 3KB - Virtual size: 2KB

.edata Size: 512B - Virtual size: 115B

.data Size: 57KB - Virtual size: 57KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 512B - Virtual size: 262B

.text
Size: 13KB - Virtual size: 13KB

.crt
Size: 512B - Virtual size: 72B

.rdata
Size: 3KB - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 115B

.data
Size: 57KB - Virtual size: 57KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 512B - Virtual size: 262B