beb2a5872ef88dca1a8e8543500ea758

Sharing

Copy URL Twitter E-mail

General

Target

beb2a5872ef88dca1a8e8543500ea758
Size

12KB
MD5

beb2a5872ef88dca1a8e8543500ea758
SHA1

292db6e87481739f6dffbd7500d1ee2a9e54bfe4
SHA256

22fa3c60b04f91e2a5c1f284b5746a37d2321e4922cf09e5031efb814a3ac859
SHA512

3e6494eb8091283f8983eaf74b75917bb487342e74841af5bdf176805c678eefdbb6692dd9fc1e1efd409428c92cc17a5c29b00c212a849579961729449ad3df
SSDEEP

96:+LRjNHfDfVWRjv/Ykp7g6zWw657z1Ol4Le02KEipUxFsoUj8P76zWw6R588Gx1DK:OdNrdsRVW/1vAKEiuIoUj8yeSu01y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
beb2a5872ef88dca1a8e8543500ea758

Files

beb2a5872ef88dca1a8e8543500ea758
.exe windows:5 windows x86 arch:x86

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
ExitWindowsEx
CharPrevA
GetDlgItemTextA
GetWindowLongA
GetDesktopWindow
DispatchMessageA
SendMessageA
PeekMessageA
GetDlgItem
SetWindowLongA
GetWindowRect
LoadStringA
EnableWindow
EndDialog
SetDlgItemTextA
CallWindowProcA
MsgWaitForMultipleObjects
ShowWindow
MessageBoxA
GetDC
CharNextA
ReleaseDC
SendDlgItemMessageA
MessageBeep
CharUpperA
SetWindowPos
SetWindowTextA
DialogBoxIndirectParamA
SetForegroundWindow

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
RegOpenKeyExA

ole32

OleInitialize
CLSIDFromProgID
CoCreateInstance

gdi32

GetStockObject
DeleteObject
CreateFontIndirectA
GetObjectA

kernel32

ReleaseSemaphore
FindNextFileW
GetSystemDefaultLangID
GetFileSize
CreateDirectoryW
SetUnhandledExceptionFilter
DeviceIoControl
CloseHandle
RemoveDirectoryW
GetFileAttributesW
GetTempPathW
GetCurrentThreadId
GetWindowsDirectoryA
CreateSemaphoreA
FindResourceW
IsBadReadPtr
DeleteFileW
GetSystemDirectoryW
FindFirstFileW
GetPrivateProfileIntW
GetVersionExA
GetUserDefaultLangID
ReleaseMutex
CreateFileW
HeapFree
GetTickCount
GetProcessHeap
VirtualUnlock
lstrlenA
LocalFree
GetPrivateProfileStringW
SetFilePointer
QueryPerformanceCounter
OpenFileMappingW
GetSystemTime
SetFileAttributesA
VirtualAlloc
GetTempFileNameW
CreateFileA
SetEndOfFile
GetStartupInfoA
CreateMutexA
UnhandledExceptionFilter
VirtualFree
VirtualLock
LockResource
GetCurrentProcessId
WriteFile
SetLastError
HeapAlloc
InterlockedDecrement
GetSystemTimeAsFileTime
InterlockedIncrement
FindClose
lstrcmpiA
OpenSemaphoreA
GlobalWire
SizeofResource
GetCurrentProcess
ReadFile
GetLastError
MultiByteToWideChar
LoadResource

ntdll

RtlCreateSecurityDescriptor
NtQueryObject
RtlEqualUnicodeString
NtSetSecurityObject
NtQuerySecurityObject
RtlInitUnicodeString
RtlInitAnsiString

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b28f1e37db3adc1995bf401ca65650b6

Headers

File Characteristics

Imports

user32

advapi32

ole32

gdi32

kernel32

ntdll

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 122KB

.rsrc Size: 3KB - Virtual size: 3KB

.edata Size: 130KB - Virtual size: 191KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 122KB

.rsrc
Size: 3KB - Virtual size: 3KB

.edata
Size: 130KB - Virtual size: 191KB