e0ea46ada60273ef2b488ed2dad299d3

Sharing

Copy URL

Twitter E-mail

General

Target

e0ea46ada60273ef2b488ed2dad299d3
Size

132KB
MD5

e0ea46ada60273ef2b488ed2dad299d3
SHA1

e7c232f468d7691c4392c3f08d3da4793575d678
SHA256

dd606b293eb3027f86b4b7c41be97bbefb35479e484c84e4f5ee92e237a282c6
SHA512

90852a1b3403b3b33718123f7e8ab7d1eed0a9b795d4d76c484c78337a2c345b0b5f5a65022fbfd0789a08298e8d8083de130fa9be08417bbeabd5565bdea137
SSDEEP

3072:fsFwKVfpHUKMvQ788V6ET+iQ8ihiPStCvawxrtvovY:EFRp8cT8APStCvXeA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0ea46ada60273ef2b488ed2dad299d3

Files

e0ea46ada60273ef2b488ed2dad299d3
.exe windows:4 windows x86 arch:x86

dca1d9dce0d705356a2edc539f0208fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
GetProcessHeap
GetStdHandle
GetModuleHandleA
VirtualAlloc
ExitProcess

user32

SendMessageA
SetCapture
SetWindowPlacement
DrawMenuBar
DeleteMenu
GetWindowTextLengthA
DrawAnimatedRects
EnableMenuItem
UpdateWindow
EnableScrollBar
GetKeyboardType
DefWindowProcA
SetCursor
GetActiveWindow
SystemParametersInfoA
SetScrollInfo
IntersectRect
GetSysColorBrush
SetWindowsHookExA
GetMenuState
ActivateKeyboardLayout
GetCursorPos
SetPropA
SetActiveWindow
CharUpperBuffA
PtInRect
SetParent
WindowFromPoint
DispatchMessageA
IsWindowUnicode
IsMenu
DestroyCursor
ShowScrollBar
SetForegroundWindow
EndPaint
RegisterClipboardFormatA
TrackPopupMenu
CharNextW
GetForegroundWindow
CallNextHookEx
ReleaseCapture
GetDlgItem
DrawIconEx
DrawEdge
DestroyWindow
IsWindow
IsDialogMessageW
LoadBitmapA
EmptyClipboard
PostQuitMessage
EndDialog
GetScrollPos
IsZoomed
EqualRect
DestroyIcon
SetClipboardData
GetWindowThreadProcessId
OpenIcon
FrameRect
DrawIcon
GetTopWindow
SetScrollPos
GetKeyState
GetClassInfoA
CharToOemA
MessageBoxA
IsRectEmpty
GetDC
CharLowerBuffA
GetSystemMenu
SetScrollRange
TranslateMessage
GetDCEx
ChildWindowFromPoint
KillTimer
GetSystemMetrics
EnumChildWindows
UnhookWindowsHookEx
BeginPaint
GetCapture
GetClassNameA
EnumThreadWindows
GetScrollInfo
OffsetRect
IsCharUpperA
DefMDIChildProcA
CreateMenu
GetKeyboardState
FindWindowA
MoveWindow
EnableWindow
OemToCharA
RegisterClassA
CharLowerA

oleaut32

GetErrorInfo
OleLoadPicture
SysReAllocStringLen
RegisterTypeLib
SafeArrayUnaccessData
VariantChangeType
SysAllocStringLen
SafeArrayPtrOfIndex
SysFreeString
SysStringLen

msvcrt

swprintf
tolower
memmove
wcstol
srand
memset
sprintf
memcpy
_acmdln
mbstowcs

gdi32

SelectPalette
GetTextAlign
GetBkColor

comdlg32

ChooseColorA

version

VerFindFileA
GetFileVersionInfoSizeA

shell32

SHGetFileInfoA
SHGetDiskFreeSpaceA
Shell_NotifyIconW
SHGetDesktopFolder

shlwapi

SHEnumValueA
PathIsContentTypeA
SHQueryValueExA
SHQueryInfoKeyA
SHStrDupA

advapi32

RegQueryValueA
RegCreateKeyExA

Exports

Exports

_ljFpl@12
jA2VRvjIV@4
_66xWmSGVx
_WaHCt
tsyRnfDxUkG
pLRtdP@4
xRnx51
_CnwXCj_guTE
B2Z8LzDrl
_UsZGQqgA
_3QmVAqmNxw1
_ldcuyMkmvsGQ
dVEfjSIygBuQ@12
_QI5hnPQuApGzz@4
LSQfc@12
UPaVOcJ5P
_ZTN8tw7SMD@4
_TKVdgqQ5@8
_m5nA_JLzYLe
_OJvbaR2@12
_ZiSQgHzuh
_pH4DvBntHcbm
_rjotEV_NT8cQg@12
7xQFGyuH_nlF@8
bGx0GJXtVkl2eW
xsxl9@16
_1wfr8
NcTWRZAwHh@16
KrE2ig@20
_BIJbwp92J
QZDzsNGkC5yI
JXozPhh
mC31JGCd5RBwb@4

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text

Sharing

General

Malware Config

Signatures

Files

dca1d9dce0d705356a2edc539f0208fa

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

msvcrt

gdi32

comdlg32

version

shell32

shlwapi

advapi32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 107KB - Virtual size: 235KB

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 107KB - Virtual size: 235KB

.rsrc
Size: 5KB - Virtual size: 4KB