e5dbcc8d3931b441103576af3f39a4920bd10e6aedc25d36f1a065cb7cadf5d6

Sharing

Copy URL Twitter E-mail

General

Target

e5dbcc8d3931b441103576af3f39a4920bd10e6aedc25d36f1a065cb7cadf5d6
Size

265KB
MD5

b6691d4ae998d8776ad649ca59dbf6f0
SHA1

e1c49bd6ec5a1f6f550f6235bf76478d42cadadd
SHA256

e5dbcc8d3931b441103576af3f39a4920bd10e6aedc25d36f1a065cb7cadf5d6
SHA512

3ef92a0f8741f29c70483d395b3b8a490262b80077fae9369391ecd0fe5d4cc109aa1c275bd01fbd0a40233d6b1467ae3b41727f428d06345684642448f9dc75
SSDEEP

1536:ancIqakK8NOGfOQepJP6CIy8YJTOR2bOmdPZOCEJV:acI78NR1eL18IOR2bNPZcJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5dbcc8d3931b441103576af3f39a4920bd10e6aedc25d36f1a065cb7cadf5d6

Files

e5dbcc8d3931b441103576af3f39a4920bd10e6aedc25d36f1a065cb7cadf5d6
.exe windows:6 windows x86 arch:x86

048e2f5a5e62364e57a598a273f23d0c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteDC
GetDIBits
BitBlt
GetObjectW
SelectObject
CreateCompatibleDC
CreateDIBitmap
PatBlt
InvertRgn
CombineRgn
CreateRectRgn
StretchDIBits
SelectPalette
CreateCompatibleBitmap
GdiFullscreenControl
GdiFlush
PolyPatBlt
GetStockObject
SetBkColor
SetTextColor
SetDCBrushColor
GetNearestColor
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreateDCW
GetTextFaceW
SetFontEnumeration
GetDeviceCaps
GetRegionData
GetRgnBox
PolyTextOutW
GetCurrentObject
SetBkMode
RealizePalette
SetSystemPaletteUse
GetStringBitmapW
CreateSolidBrush
TranslateCharsetInfo
GetCharWidth32W
CreateBitmap
SetBitmapBits
GetBitmapBits
StretchBlt
CreateFontIndirectW
SetDIBitsToDevice

user32

RegisterClassExW
SetProcessDPIAware
GetForegroundWindow
SetCursor
SendMessageTimeoutW
TrackPopupMenuEx
UnpackDDElParam
CreateIconFromResourceEx
ReuseDDElParam
CreateWindowExW
GetDC
GetSystemMenu
SetActiveWindow
LoadCursorW
KillTimer
ReleaseDC
DestroyWindow
GetKeyboardLayout
SetTimer
ScrollDC
SetScrollInfo
GetWindowRect
MonitorFromRect
MapWindowPoints
GetMonitorInfoW
GetClientRect
ClientToScreen
AdjustWindowRectEx
GetCaretBlinkTime
GetWindowTextW
SetWindowTextW
SetWindowPos
NotifyWinEvent
MapVirtualKeyW
VkKeyScanW
CloseClipboard
InvalidateRect
GetClipboardData
OpenClipboard
ReleaseCapture
LoadIconW
LoadImageW
EnumDisplaySettingsW
BeginPaint
DrawIcon
EndPaint
DefWindowProcW
IsIconic
EnableMenuItem
LoadMenuW
AppendMenuW
SetMenuItemInfoW
ShowWindow
MessageBoxW
GetKeyboardState
ToUnicodeEx
GetMessageW
DispatchMessageW
UnhookWindowsHookEx
RegisterWindowMessageW
SetWindowsHookExW
GetWindowLongW
SetCapture
SetClipboardData
EmptyClipboard
GetKeyState
PrivateExtractIconExW
EnterReaderModeHelper
TranslateMessageEx
ConsoleControl
GetWindowPlacement
SetWindowPlacement
SystemParametersInfoW
ActivateKeyboardLayout
GetKeyboardLayoutNameA
GetKeyboardLayoutNameW
CopyIcon
DestroyIcon
DialogBoxParamW
EndDialog
GetDlgItemTextW
IsDlgButtonChecked
SendNotifyMessageW
SetWindowLongW
SendDlgItemMessageW
CheckRadioButton
GetSystemMetrics
SendMessageW
Pt

msvcrt

ntdll

api-ms-win-core-localregistry-l1-1-0

kernel32

imm32

ole32

oleaut32

SysFreeString
SysAllocStringLen
SysStringLen
VariantInit
SysAllocString
SysReAllocString
VariantClear

Sections

.text
Size: 195KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FE_TEXT
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

048e2f5a5e62364e57a598a273f23d0c

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

msvcrt

ntdll

api-ms-win-core-localregistry-l1-1-0

kernel32

imm32

ole32

oleaut32

Sections

.text Size: 195KB - Virtual size: 195KB

FE_TEXT Size: 21KB - Virtual size: 20KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 34KB - Virtual size: 33KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 195KB - Virtual size: 195KB

FE_TEXT
Size: 21KB - Virtual size: 20KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 9KB - Virtual size: 9KB