051568a373937e5e816cac95da03f9a857528b4f828a16e6528e527cefe0fe8b

Sharing

Copy URL Twitter E-mail

General

Target

051568a373937e5e816cac95da03f9a857528b4f828a16e6528e527cefe0fe8b
Size

21KB
MD5

0b323822b9008df06ec21723ced81fcc
SHA1

02b181b90ffce792d5a88c127cb7a8ce52983c1e
SHA256

051568a373937e5e816cac95da03f9a857528b4f828a16e6528e527cefe0fe8b
SHA512

ca860391d040e6d494660adb8cbdfd5b86a06c6e74d92a2cb74d03458b7f7fb144ed10ef0d62eeead8f1b9685a4bec1c972035c38f8469f3f40b7cbf0d228db7
SSDEEP

384:BqxWIqKSMUY/WAf398CbdHMQ73LrBtQjvyUL9mD5h6xhrcMjKi:BqxWIqZlY/WAf39rMw3LFtuLOhQAMWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
051568a373937e5e816cac95da03f9a857528b4f828a16e6528e527cefe0fe8b

Files

051568a373937e5e816cac95da03f9a857528b4f828a16e6528e527cefe0fe8b
.exe windows:5 windows x86 arch:x86

95323de601ce84ce3fa8985f96b4cacc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

_ismbcprint
_ultow
_ismbcspace
fwscanf
iswpunct
_ismbckata
_copysign
_searchenv
_mbccpy
_ismbcsymbol
printf
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
mbstowcs
wcsspn

opengl32

glEvalCoord2dv
glColor4bv
glPolygonStipple
glLightModelf
glVertex3sv
glClearAccum
glVertex2i
glTexCoord4iv
glCopyTexSubImage2D
glClipPlane
glEvalCoord2d
glNormal3b
glScissor
glIndexubv
glGetLightfv
glPopMatrix
glMap1f
glColor4ub

rpcrt4

MesDecodeBufferHandleCreate
data_from_ndr
RpcBindingInqAuthClientA
RpcServerUseAllProtseqsIfEx
RpcBindingInqAuthClientExA
UuidEqual
NdrOleFree
I_RpcReceive
RpcBindingToStringBindingW
RpcCancelThread
RpcFreeAuthorizationContext
NDRcopy
NdrSimpleTypeMarshall
I_RpcRequestMutex
NdrClientContextMarshall

msvcrt40

?sgetn@streambuf@@QAEHPADH@Z
_mbsnicoll
_mbsnbset
__p__acmdln
_wspawnlpe
??_Eostream@@UAEPAXI@Z
fputws
__p__amblksiz
?_query_new_mode@@YAHXZ
_ftol
??0strstream@@QAE@PADHH@Z
_fsopen
system
?sync@streambuf@@UAEHXZ
_mbsdec
_fpclass

kernel32

GetVersionExA
SwitchToFiber
GetCurrentProcessId
RaiseException
ChangeTimerQueueTimer
GetTickCount
CreateMutexA
GetConsoleMode
QueryPerformanceCounter
GetCurrentProcess
UTUnRegister
FileTimeToDosDateTime
GetCurrentThreadId
GetLongPathNameW
CreateActCtxW
WritePrivateProfileStringA
CreateHardLinkA
SetLocalTime
SetCalendarInfoA
GetVolumePathNamesForVolumeNameW
VirtualAlloc
FindClose

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95323de601ce84ce3fa8985f96b4cacc

Headers

DLL Characteristics

File Characteristics

Imports

crtdll

opengl32

rpcrt4

msvcrt40

kernel32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 1024B - Virtual size: 633B

.data Size: 512B - Virtual size: 863B

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 1024B - Virtual size: 633B

.data
Size: 512B - Virtual size: 863B

.rsrc
Size: 2KB - Virtual size: 1KB