be0160f44ede4d36527d196eb51ab201

Sharing

Copy URL Twitter E-mail

General

Target

be0160f44ede4d36527d196eb51ab201
Size

171KB
MD5

be0160f44ede4d36527d196eb51ab201
SHA1

e8d70fa4478de4cc058f69837604311df4d3e109
SHA256

7b9eaa4cc90217cfb173762ce9caab847021e5e281bda5a8fba5553263c5599f
SHA512

ee8b5c454bb754e13311ccdf150a7945f9fe9c46860104506d86302e116830fdc6ab4968abade9593a4cadb7b74e15b82e044dafa902d7c21973178d9bde2180
SSDEEP

3072:B+2RsMGOToO+YzAhcIwxdmDRYsr0r8wTyq6Q:BTyRkoO+Y8hvor8wZ6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be0160f44ede4d36527d196eb51ab201

Files

be0160f44ede4d36527d196eb51ab201
.exe windows:4 windows x86 arch:x86

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

RegisterWindowMessageA
IsIconic
GetActiveWindow

advapi32

RegCreateKeyA

comctl32

ImageList_GetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Draw
ImageList_Create
ImageList_Add
ImageList_DrawEx
ImageList_Read
ImageList_Write

kernel32

IsBadReadPtr
LoadLibraryExA
GetProcAddress
GetCommandLineW
VirtualAlloc
ExitThread
GetVersionExA
GetLastError
GetCommandLineA
LoadLibraryA
ExitProcess
GetOEMCP
GetModuleHandleA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES02
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES86
Size: 512B - Virtual size: 391B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES44
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES00
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES72
Size: 512B - Virtual size: 203B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES43
Size: 1024B - Virtual size: 757B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES22
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES30
Size: 1024B - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

431186c2fbd0006325939775ccd295f4

Headers

File Characteristics

Imports

user32

advapi32

comctl32

kernel32

Sections

.text Size: 18KB - Virtual size: 17KB

.data Size: 140KB - Virtual size: 140KB

RES02 Size: 2KB - Virtual size: 1KB

RES86 Size: 512B - Virtual size: 391B

RES44 Size: 1KB - Virtual size: 1KB

RES00 Size: 1KB - Virtual size: 1KB

RES72 Size: 512B - Virtual size: 203B

RES43 Size: 1024B - Virtual size: 757B

RES22 Size: 512B - Virtual size: 131B

RES30 Size: 1024B - Virtual size: 595B

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.data
Size: 140KB - Virtual size: 140KB

RES02
Size: 2KB - Virtual size: 1KB

RES86
Size: 512B - Virtual size: 391B

RES44
Size: 1KB - Virtual size: 1KB

RES00
Size: 1KB - Virtual size: 1KB

RES72
Size: 512B - Virtual size: 203B

RES43
Size: 1024B - Virtual size: 757B

RES22
Size: 512B - Virtual size: 131B

RES30
Size: 1024B - Virtual size: 595B

.rsrc
Size: 2KB - Virtual size: 2KB