c13fe14713680177e856bc0adec92c5b

General

Target

c13fe14713680177e856bc0adec92c5b
Size

44KB
MD5

c13fe14713680177e856bc0adec92c5b
SHA1

fa7132838e12bb7f8243f69fb9208c370b52af8e
SHA256

25d03ed278f6b17490243f3c5225a7491c44eb6b2a7c51a28b015b271fb3407a
SHA512

cd1daf9d76b19a302496c5d04bd10cc507a47e0f474d62db1500ee2dcf5cdb8570fafbd76ce23ef28024a1daf2dcbd6ba679b0beca30fb04d7972ff7d9bbb438
SSDEEP

768:Vb9XVu1uj2YDKuZ7Id8wb3wm+E6Y7fTGvGqMVYbgQtlj4Ugv6Lh:Vb9l9j28LWrwaX7LGOq02tlRLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c13fe14713680177e856bc0adec92c5b

Files

c13fe14713680177e856bc0adec92c5b
.exe windows:4 windows x86 arch:x86

c2620f591f871e9aad47180febf9e1f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetConsoleInputExeNameW
GetUserDefaultLangID
UTUnRegister
GetTapeStatus
GetFullPathNameW
RequestWakeupLatency
ResumeThread
GetConsoleAliasExesLengthA
SetConsoleHardwareState
ResetWriteWatch
LCMapStringW
WaitForMultipleObjects
VirtualProtect
GetDateFormatW
MoveFileWithProgressA

user32

DestroyMenu
DdeQueryStringA
RegisterTasklist
SetWindowTextW
UnpackDDElParam
ChildWindowFromPoint
SendInput
RegisterDeviceNotificationW
SetCaretBlinkTime
DestroyIcon
RegisterLogonProcess
BroadcastSystemMessageA
WinHelpW
MapVirtualKeyExW
OffsetRect
LoadMenuIndirectA

gdi32

EngAcquireSemaphore
EngFreeModule
PolyPolygon
GetColorSpace
SetBoundsRect
GetDIBColorTable
GetViewportOrgEx
PlayMetaFileRecord
GetTextFaceAliasW
GdiSetAttrs
StartDocA
STROBJ_bGetAdvanceWidths
CopyMetaFileA
EngReleaseSemaphore
GetDeviceGammaRamp
EngWideCharToMultiByte
GetMetaFileW
GdiComment
AddFontMemResourceEx
LPtoDP

comdlg32

GetSaveFileNameA
ReplaceTextW
dwOKSubclass
ChooseFontW
GetFileTitleA
GetOpenFileNameA
WantArrows
LoadAlterBitmap
PrintDlgExA
PrintDlgW
ChooseColorW
PageSetupDlgW
FindTextA

Sections

.text
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c2620f591f871e9aad47180febf9e1f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

Sections

.text Size: 4KB - Virtual size: 40KB

.data Size: 37KB - Virtual size: 40KB

.idata Size: 2KB - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 40KB

.data
Size: 37KB - Virtual size: 40KB

.idata
Size: 2KB - Virtual size: 4KB