e115759c4171f0bfda3992d293ca26e5

Sharing

Copy URL

Twitter E-mail

General

Target

e115759c4171f0bfda3992d293ca26e5
Size

27KB
MD5

e115759c4171f0bfda3992d293ca26e5
SHA1

3e860ed7569320382178d0da5858478adf4151c9
SHA256

e649143e710f71d34ecac0484a5b369d45929fcf1d09825bdba8a99619bb4c13
SHA512

15c81db291b219bf5b97141819d3edd6f02bbfab2d1e021ff12db7e155e7af172501e3cf8478545bdf95dc1f851bb111023531c2374b89bb2f6cff6cffdfc1c2
SSDEEP

384:3lP6TEr48xPeqO79kpw+5eSP8dNbbZomD8q92X7Yz8DOtEn2MeWTlg1TJAvphHIk:wSXD/wdNbV5V2X7Y4Dy+61TJAv3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e115759c4171f0bfda3992d293ca26e5

Files

e115759c4171f0bfda3992d293ca26e5
.dll windows:4 windows x86 arch:x86

65eee7cb9beba7fa5f58ea0c8223b00f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTempPathA
DeleteFileA
ResetEvent
WaitForSingleObject
GetLastError
CreateEventA
SetEvent
WriteFile
CreateMutexA
GetCurrentProcessId
GetModuleFileNameA
VirtualProtectEx
GetCurrentThreadId
GetCurrentProcess
VirtualAlloc
SetThreadContext
GetCurrentThread
SetUnhandledExceptionFilter
GetComputerNameA
GetFileSize
InitializeCriticalSection
GetModuleHandleA
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
LoadLibraryA
OpenThread
ReadProcessMemory
WriteProcessMemory
CreateFileA
ReadFile
CloseHandle
ExitProcess
GetCommandLineA
IsBadReadPtr
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
TerminateThread
CreateThread
GetPrivateProfileStringA
Sleep

user32

GetForegroundWindow
FindWindowA
GetDesktopWindow
GetWindow
GetWindowThreadProcessId
GetWindowTextA
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetClassNameA

msvcrt

free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
_strnicmp
sprintf
strcpy
strlen
strstr
??2@YAPAXI@Z
memcpy
strrchr
memset
strcat
strncpy
strchr
strcmp
wcslen
fclose
fread
fopen

wininet

InternetOpenA
InternetReadFile
InternetCloseHandle
InternetOpenUrlA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdt
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65eee7cb9beba7fa5f58ea0c8223b00f

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

wininet

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 4KB

sdt Size: 512B - Virtual size: 153B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 4KB

sdt
Size: 512B - Virtual size: 153B

.reloc
Size: 2KB - Virtual size: 2KB