c2a0120643eae3289abe564e9a66072c

Sharing

Copy URL Twitter E-mail

General

Target

c2a0120643eae3289abe564e9a66072c
Size

130KB
MD5

c2a0120643eae3289abe564e9a66072c
SHA1

1f7bd60c52041550d6b2403ff4d38d35ab9cbe66
SHA256

53fe96bf08ca8d5a398f4935a4c12bfd76b24112d3b5e29b8102052d3c820f2f
SHA512

1447921824ec5f12d8ab0514ee68a6277bb7f235d3853ae8a72a7515d8f6a8f3db201eaaa79f8cf087e633fcd99bbebb84c76bad80badb4a08e127cf20ebcc24
SSDEEP

3072:QoZE3yoDfUCEt58t0SRR02eHdgwrCG5OZIHE7ngzEm0s:QoZw6kKSROQPIVzE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a0120643eae3289abe564e9a66072c

Files

c2a0120643eae3289abe564e9a66072c
.exe windows:4 windows x86 arch:x86

db729f5b23c77b7122d47280413022ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterWindowMessageA
GetSysColor
ShowOwnedPopups
DialogBoxParamA
ArrangeIconicWindows
WindowFromPoint
SendMessageA
EnumWindows
ReplyMessage

ole32

CoInstall
CreateAntiMoniker
CreateGenericComposite
OleSetAutoConvert
OleCreateFromData
CoTreatAsClass

kernel32

GetFileType
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eayb
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jabigt
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db729f5b23c77b7122d47280413022ef

Headers

File Characteristics

Imports

user32

ole32

kernel32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 90KB

eayb Size: 282KB - Virtual size: 282KB

jabigt Size: 111KB - Virtual size: 110KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 90KB

eayb
Size: 282KB - Virtual size: 282KB

jabigt
Size: 111KB - Virtual size: 110KB

.rsrc
Size: 5KB - Virtual size: 5KB