267ae9278263dc2ff249d22123387097667aee178903c6bd25aeb7d383df5c41

Sharing

Copy URL Twitter E-mail

General

Target

267ae9278263dc2ff249d22123387097667aee178903c6bd25aeb7d383df5c41
Size

5.7MB
MD5

386b817ce6805831d7040f35d58c209d
SHA1

b09a8b721bbafb92be80000f04d2ccf44d3ca3fe
SHA256

267ae9278263dc2ff249d22123387097667aee178903c6bd25aeb7d383df5c41
SHA512

fdc215ef42f5eaa6ed89a52242fdd085cf4c4962aa44fb7512c99eb164caf0f77dc02e51fd26a513bde68ed80017c818218a394b9daef0d1c6edd457c0d36e41
SSDEEP

98304:Trs2AIXLooK9Uu8CSJ/ovX8NuZOMFfUCBh6lLkuXA7Q5Wk:TrsmGUu8CSevMcocJBUlLxXA7QMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
267ae9278263dc2ff249d22123387097667aee178903c6bd25aeb7d383df5c41

Files

267ae9278263dc2ff249d22123387097667aee178903c6bd25aeb7d383df5c41
.exe windows:5 windows x86 arch:x86

ba18e02f8e78e6117db13f95735976ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kbdgr

KbdLayerDescriptor

msvcrt

__p___initenv

kernel32

lstrcmpi
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

avicap32

capCreateCaptureWindowW

user32

CharUpperBuffW

Sections

.data
Size: - Virtual size: 1004KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.)Tf
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 654B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.[FZ
Size: - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.[<^
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.3<<
Size: 5.7MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba18e02f8e78e6117db13f95735976ce

Headers

File Characteristics

Imports

kbdgr

msvcrt

kernel32

avicap32

user32

Sections

.data Size: - Virtual size: 1004KB

.)Tf Size: - Virtual size: 16KB

.rdata Size: - Virtual size: 654B

.text Size: - Virtual size: 260KB

.htext Size: - Virtual size: 4KB

.[FZ Size: - Virtual size: 2.9MB

.[<^ Size: 1024B - Virtual size: 976B

.3<< Size: 5.7MB - Virtual size: 5.6MB

.rsrc Size: 16KB - Virtual size: 16KB

.data
Size: - Virtual size: 1004KB

.)Tf
Size: - Virtual size: 16KB

.rdata
Size: - Virtual size: 654B

.text
Size: - Virtual size: 260KB

.htext
Size: - Virtual size: 4KB

.[FZ
Size: - Virtual size: 2.9MB

.[<^
Size: 1024B - Virtual size: 976B

.3<<
Size: 5.7MB - Virtual size: 5.6MB

.rsrc
Size: 16KB - Virtual size: 16KB