e121513c876b46f9eb58c4a8b23b8985

General

Target

e121513c876b46f9eb58c4a8b23b8985
Size

52KB
MD5

e121513c876b46f9eb58c4a8b23b8985
SHA1

12dc1053764bb251947c35d7c6a2ab6daa6a1c3c
SHA256

73e75ff0b9f2a7b3295a858f623ff12aabc469fa4d275413ecac8754dd126ed7
SHA512

5ea1c6b911f252f8df71e229dbd10faba9ffa997df7b973f1f1d0d93f54dd8afb87aae45c267f930c771c537ae1614e98aad5a23adf724acaeabff5013311e5e
SSDEEP

768:fNXrIJIDYMoPdiQCEZ6qbiDab285zlqGie/WAoU6oDS:m1Boa9J7oZoDS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e121513c876b46f9eb58c4a8b23b8985

Files

e121513c876b46f9eb58c4a8b23b8985
.exe windows:4 windows x86 arch:x86

93afaff1f361bdfd50de0a65987d7d70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CreateThread
Process32Next
Process32First
CreateToolhelp32Snapshot
ReadProcessMemory
OpenProcess
Module32Next
TerminateProcess
SetFileAttributesA
Module32First
CloseHandle
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
Sleep
DeleteFileA
GetTickCount
ExitProcess
GetLastError
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
FlushFileBuffers

user32

ShowWindow
keybd_event
VkKeyScanA
FindWindowA
BringWindowToTop
SetForegroundWindow
SetFocus

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
GetUserNameA
RegDeleteValueA

ws2_32

closesocket
WSACleanup

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

93afaff1f361bdfd50de0a65987d7d70

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB