bbd29f5d8f52c0e3e7b830735954581f

Sharing

Copy URL Twitter E-mail

General

Target

bbd29f5d8f52c0e3e7b830735954581f
Size

1.5MB
MD5

bbd29f5d8f52c0e3e7b830735954581f
SHA1

8b41a6d7a1368c21ac8619bd668299f203dc3b9e
SHA256

774edfef305487202c5d927ddf6e4397f5fc5338be793b76f85775cb334bc052
SHA512

9870afd6867335e085001dfe92be787fa3d41a2e2e78d69cfc13da4f1064bd0c8613f6e6037ff14733f2c0f1909f75538820c4f667211f41b5f67fa4b3a02242
SSDEEP

24576:VqRTZW+grVQQb7tIwNI5bBUD5aMqfg0p2TdCQ2STacyDjOubnISmOF8W28u8W+za:V9JQQbRM51Y5Sg1cQ2STHWZmOF2x8Xu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbd29f5d8f52c0e3e7b830735954581f

Files

bbd29f5d8f52c0e3e7b830735954581f
.exe windows:4 windows x86 arch:x86

a994a064929b9db82b57c05917f6f216

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SelectObject
GetDeviceCaps
DeleteObject
SetBkColor
CreateCompatibleBitmap

kernel32

GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetCurrentProcessId
GetLastError
GetCurrentThread
GetTickCount
ExitProcess
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
IsValidCodePage
CreateProcessA
SizeofResource
InterlockedExchange
GetModuleHandleW
CloseHandle
ReadFile
RaiseException
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
GetShortPathNameA
lstrlenW
GlobalUnlock
GetThreadLocale
LCMapStringA
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
LeaveCriticalSection
CreateFileA
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
GlobalLock
FindFirstFileW
CompareStringA
FindFirstFileA
GetProcAddress
DeleteFileW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
VirtualQuery
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetExitCodeProcess
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
GetStdHandle

user32

ScreenToClient
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
FillRect
SetTimer
LoadCursorA
ShowWindow
GetParent
DestroyWindow
SendMessageA
GetCursorPos
EndPaint
SetWindowPos
LoadIconA
MessageBoxA
IsWindowVisible
TranslateMessage
InvalidateRect

oleaut32

SysAllocStringLen
SysStringLen
VariantClear
SysAllocString

Sections

.text
Size: 1.5MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a994a064929b9db82b57c05917f6f216

Headers

File Characteristics

Imports

gdi32

kernel32

user32

oleaut32

Sections

.text Size: 1.5MB - Virtual size: 1.8MB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 13KB - Virtual size: 13KB

.rsrc Size: 60KB - Virtual size: 60KB

.text
Size: 1.5MB - Virtual size: 1.8MB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 60KB - Virtual size: 60KB