02634c8f4f8bfa6826b45014efea41a5695e5ae581674247add7eadde5ec6d11

General

Target

02634c8f4f8bfa6826b45014efea41a5695e5ae581674247add7eadde5ec6d11
Size

105KB
MD5

12e7251b03ced794462bcabaa692f3b3
SHA1

97642037745c6db8eeb9b65ca2131cbbfdd05249
SHA256

02634c8f4f8bfa6826b45014efea41a5695e5ae581674247add7eadde5ec6d11
SHA512

84ce2b515810635862e08a863346e597deea7bb129900cc38e60f057547ab477a603882d1f112419770bddb67fcd73a06e55baf1c351352acadbda8d879ceada
SSDEEP

1536:HlcaWDzezj3J/1CVw0JEXnG/yG6pZ9AwVjvXmF4/VrmolxncK6H4qEaeZA:HaaW+p/1Ca06XnkyG6hjvnrxhcK0eq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02634c8f4f8bfa6826b45014efea41a5695e5ae581674247add7eadde5ec6d11

Files

02634c8f4f8bfa6826b45014efea41a5695e5ae581674247add7eadde5ec6d11
.exe windows:4 windows x86 arch:x86

9d9367bf5dccbafb4952ddd7fd3da2a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetDesktopWindow
GetSystemMetrics
GetParent
CharNextA
TranslateMessage

kernel32

GetCurrentThreadId
GetCurrentThread
RemoveDirectoryA
GetStartupInfoA
lstrcmpA
GetVersion
GetDriveTypeA
SetCurrentDirectoryA
GetThreadLocale
lstrlenW
lstrcmpiA
GetTickCount
GetACP
GetCurrentProcess
GlobalFindAtomA
GetModuleHandleW
GetProcessHeap
GetUserDefaultLangID
DeleteFileW
GetWindowsDirectoryA
lstrcmpiW
DeleteFileA
GetModuleHandleA
CopyFileA
GetCommandLineW
lstrlenA
IsDebuggerPresent
MulDiv
GetCommandLineA
GlobalFindAtomW
GetCurrentProcessId
RemoveDirectoryW
GetOEMCP
GetConsoleOutputCP
QueryPerformanceCounter
ExitProcess
VirtualAlloc
VirtualFree

gdi32

RectVisible
RestoreDC
CreateSolidBrush
GetObjectA
CreateCompatibleDC
SaveDC
GetPixel
SetTextAlign
GetTextMetricsA
SelectPalette
GetStockObject
SetMapMode
SelectObject
GetClipBox
CreatePen
CreateFontIndirectA
GetDeviceCaps
LineTo
CreatePalette
PatBlt
DeleteDC
SetTextColor
DeleteObject
SetStretchBltMode
GetNearestPaletteIndex

glu32

gluQuadricCallback

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d9367bf5dccbafb4952ddd7fd3da2a0

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 11KB - Virtual size: 11KB