d6f2939e76d1c492c3d6c28b3b6b89a0

Sharing

Copy URL

Twitter E-mail

General

Target

d6f2939e76d1c492c3d6c28b3b6b89a0
Size

49KB
MD5

d6f2939e76d1c492c3d6c28b3b6b89a0
SHA1

6f97364ae27d92525b2f5c0666c469fe15a879f7
SHA256

606f0b533e4849eaa7bfc7be3d19f6175bf2ba911f7eb110352a81240fe3d924
SHA512

f8bcd42d1c7f68a149423f9e22c03df8e532a7ad2dd209cf0fbe0661bae13d75b3fd9a40e90d98d7eccd5983c77eda4b1446235dbc2e3169aaa99222b6d62ed4
SSDEEP

768:8XbRPYW5tbi1G1x4nIHELNh8CUhQiDUtrEg5qkcrJ:8VPYW5tecx4nIkL7StDUtYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f2939e76d1c492c3d6c28b3b6b89a0

Files

d6f2939e76d1c492c3d6c28b3b6b89a0
.exe windows:5 windows x86 arch:x86

f00020b2314c31b9a88795bb5ade830b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetModuleHandleA
LoadLibraryA
GetProcessHeap
GetProcAddress

user32

GetForegroundWindow
GetKeyboardLayout
GetMenu
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongW
IsClipboardFormatAvailable
GetFocus
LoadIconW
MessageBeep
MessageBoxW
OpenClipboard
PostMessageW
RegisterClassExW
SendMessageW
SetActiveWindow
SetWindowTextW
TranslateAcceleratorW
TranslateMessage
wsprintfW
GetDesktopWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DestroyWindow
DefWindowProcW
CloseClipboard
CheckMenuItem
CharNextW
IsIconic

comdlg32

CommDlgExtendedError
FindTextW
GetFileTitleW
GetOpenFileNameW
GetSaveFileNameW
ReplaceTextW
PrintDlgExW
PageSetupDlgW
ChooseFontW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

init1
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

init2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

init3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

init4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

init5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f00020b2314c31b9a88795bb5ade830b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 288B

init1 Size: 1024B - Virtual size: 1000B

init2 Size: 1024B - Virtual size: 1000B

init3 Size: 1024B - Virtual size: 1000B

init4 Size: 1024B - Virtual size: 1000B

init5 Size: 1024B - Virtual size: 1000B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 1024B - Virtual size: 610B

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 288B

init1
Size: 1024B - Virtual size: 1000B

init2
Size: 1024B - Virtual size: 1000B

init3
Size: 1024B - Virtual size: 1000B

init4
Size: 1024B - Virtual size: 1000B

init5
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 1024B - Virtual size: 610B