e041ba85772e0c5f392354862548f6dc

Sharing

Copy URL

Twitter E-mail

General

Target

e041ba85772e0c5f392354862548f6dc
Size

355KB
MD5

e041ba85772e0c5f392354862548f6dc
SHA1

170b633c4da7bf6957d17af56d718622b210e1cf
SHA256

c611ae22ca56d270dea92887bc871206527ff2e19bd386076a6e72f4eb3218cb
SHA512

15c02910bcfdec880b288e6c5a0a4c7ad5a2a728c538837ac23b799920fb33c52dfe509a68ec1da330e36b5c89ee0c72e4b3ac4991f355bf7a8f59131d5e07b9
SSDEEP

6144:GKeVYY3Z4fLdLOrvRTLFFPn8qXmvhz0B4ABqrZLGZHs3qw1GCEyn5:GKeVR3Z4fLdyrjRnXXiaHANLiHs3qw1T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e041ba85772e0c5f392354862548f6dc

Files

e041ba85772e0c5f392354862548f6dc
.exe windows:4 windows x86 arch:x86

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor

oleaut32

SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen

shell32

DragQueryFileA

msvcrt

log10
memmove
wcsncmp

comctl32

ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock

version

GetFileVersionInfoA
VerInstallFileA

gdi32

GetDIBColorTable
GetObjectA
GetDIBits

shlwapi

PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA

kernel32

GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC9
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC6
Size: 1024B - Virtual size: 691B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC2
Size: 1024B - Virtual size: 959B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 291B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC3
Size: 1024B - Virtual size: 751B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7486454129252b32a59ea90cb57db41

Headers

File Characteristics

Imports

user32

oleaut32

shell32

msvcrt

comctl32

version

gdi32

shlwapi

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

DATA Size: 289KB - Virtual size: 288KB

.RSRC9 Size: 1KB - Virtual size: 1KB

.RSRC6 Size: 1024B - Virtual size: 691B

.RSRC2 Size: 1024B - Virtual size: 959B

.RSRC8 Size: 1KB - Virtual size: 1KB

.RSRC5 Size: 512B - Virtual size: 291B

.RSRC3 Size: 1024B - Virtual size: 751B

.rsrc Size: 1024B - Virtual size: 992B

.text
Size: 57KB - Virtual size: 57KB

DATA
Size: 289KB - Virtual size: 288KB

.RSRC9
Size: 1KB - Virtual size: 1KB

.RSRC6
Size: 1024B - Virtual size: 691B

.RSRC2
Size: 1024B - Virtual size: 959B

.RSRC8
Size: 1KB - Virtual size: 1KB

.RSRC5
Size: 512B - Virtual size: 291B

.RSRC3
Size: 1024B - Virtual size: 751B

.rsrc
Size: 1024B - Virtual size: 992B