cb7ae82240b80df078fc695286be89fa

Sharing

Copy URL Twitter E-mail

General

Target

cb7ae82240b80df078fc695286be89fa
Size

243KB
MD5

cb7ae82240b80df078fc695286be89fa
SHA1

7f03f5fb80fd5e47f7fcfd2493ca8cc5d05e2c7a
SHA256

70b62706194b513bfcc46d50e730879fab844f4581571bd6ed15c8bc0cc70645
SHA512

b06efff4e0be90e9dd39688edaf1fa97732763c40c6f8efe52419714f3c7c0ba5a10180caa5794486db1cf5d2ba65136de303f5bb25befa014baa283caf36c12
SSDEEP

6144:bAoQ5RF105WPGpNS5Lsu17fTlaG1NhD10Yr:bAosnPGpNfudEkjD1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb7ae82240b80df078fc695286be89fa

Files

cb7ae82240b80df078fc695286be89fa
.exe windows:5 windows x86 arch:x86

3704888f7dd2daf14a0f21848bfc6c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SystemParametersInfoW
FindWindowA
LoadMenuW
GetDlgCtrlID
SetFocus
IsCharUpperA
IsDialogMessageW
IsZoomed
CharPrevW
GetClassLongW
DefFrameProcA
DeferWindowPos
IsWindow
DestroyCursor
ModifyMenuW
SetActiveWindow
IsCharAlphaNumericW
GetClientRect
MoveWindow
GetKeyboardLayout
AllowSetForegroundWindow
IsWindowUnicode
DestroyCaret
VkKeyScanW
HideCaret
OpenDesktopW
ReleaseDC
DefWindowProcA
ScreenToClient
GetKeyboardLayoutList
EnumThreadWindows
SetWindowTextA
GetMenuItemRect
GetClassNameW
SetDlgItemInt
FillRect

gdi32

GetObjectW
GetFontData
CreateSolidBrush
CreateDIBitmap
SetViewportExtEx
RealizePalette
EndPath
GetObjectA
GetNearestColor
CreateDIBSection
CreateDiscardableBitmap
LineDDA
WidenPath
CreateDCW
CreateFontIndirectA
StartDocW
SetDIBColorTable

kernel32

WaitForSingleObject
GetStartupInfoW
GetModuleHandleA
GetWindowsDirectoryW
DeleteFileA
lstrlenA
lstrcpynW
GetComputerNameA
GetShortPathNameA
GetUserDefaultLCID
EnumSystemLocalesA
FormatMessageA
GetStartupInfoA
OpenSemaphoreW
GetCurrentDirectoryW
FoldStringW
GetAtomNameW
lstrcpynA

Exports

Exports

?KDLJKUIOFDuioYUFKyIFYFIUIFUJHFhjkfd@@YGKEPA_WG@Z

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmem
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3704888f7dd2daf14a0f21848bfc6c3d

Headers

File Characteristics

Imports

user32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 132KB

.qdata Size: 12KB - Virtual size: 12KB

.vmem Size: - Virtual size: 107KB

.data Size: 2KB - Virtual size: 1KB

.ndata Size: 92KB - Virtual size: 91KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 133KB - Virtual size: 132KB

.qdata
Size: 12KB - Virtual size: 12KB

.vmem
Size: - Virtual size: 107KB

.data
Size: 2KB - Virtual size: 1KB

.ndata
Size: 92KB - Virtual size: 91KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 2KB