e1f6f896e9cf32e8886c4c6f86a23868

Sharing

Copy URL

Twitter E-mail

General

Target

e1f6f896e9cf32e8886c4c6f86a23868
Size

258KB
MD5

e1f6f896e9cf32e8886c4c6f86a23868
SHA1

3d24066aad405837cec45b5e9e73a734acc373e6
SHA256

cfe8e2a7e37cee1f4a2871ce5ee3b27e97a52085161788751b051394e2b235d5
SHA512

b1b94aaed49f29326171f3959615bac413bf46bea45783312f1ef2d874dbcf84f3bd11b41cd21ab344b52463f354368ab308007201c061cbf74319bba09a97b3
SSDEEP

6144:dDMbIIJdEmxZzFRIpQy9W4lyLHWyPEuSl4L1OZWyZ:dIbJTRIpFWnzVPntLkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1f6f896e9cf32e8886c4c6f86a23868

Files

e1f6f896e9cf32e8886c4c6f86a23868
.exe windows:4 windows x86 arch:x86

13e5cda5a86930750480128fa5d00aac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
memmove
cos
calloc

user32

GetParent
EqualRect
PeekMessageA
KillTimer
SetForegroundWindow
OpenClipboard
GetSystemMetrics
SetParent
EnumChildWindows
DrawMenuBar
LoadBitmapA
DrawFrameControl
CharLowerA
OemToCharA
GetKeyboardLayout
SetWindowLongA
SetWindowsHookExA
GetScrollInfo
GetLastActivePopup
CharToOemA
wsprintfA
PeekMessageW
FindWindowA
GetWindowPlacement
InsertMenuItemA
GetKeyState
GetWindowLongA
IsDialogMessageW
IsWindowUnicode
RegisterClipboardFormatA
GetClipboardData
CharUpperBuffA
CreatePopupMenu
IsDialogMessageA
EmptyClipboard
DispatchMessageW
CallWindowProcA
ReleaseCapture
IsRectEmpty
GetDlgItem
SetWindowLongW
GetMenuItemInfoA
DefFrameProcA
SetWindowTextA
SetClassLongA
GetKeyNameTextA
GetKeyboardLayoutList
ScreenToClient
DestroyWindow
SendMessageW
GetCursor
SetWindowPos
GetSysColor
InvalidateRect
RemoveMenu
GetTopWindow
ActivateKeyboardLayout
UnhookWindowsHookEx
GetScrollPos
CreateIcon
EnableScrollBar
GetForegroundWindow
ScrollWindow
GetDCEx
AdjustWindowRectEx
GetSubMenu
LoadStringA
GetMenu
PostQuitMessage
FillRect
EnumWindows
UnregisterClassA
SetActiveWindow
GetClassLongA
SetClipboardData
TranslateMessage
DeleteMenu
SetCursor
MapWindowPoints
ReleaseDC
DispatchMessageA
LoadIconA
SetScrollInfo
ShowScrollBar
LoadKeyboardLayoutA
RedrawWindow
IsWindowVisible
GetMenuStringA
DrawIconEx
CreateWindowExA
GetKeyboardLayoutNameA
EnableMenuItem
EnumThreadWindows
EnableWindow
BeginPaint
RegisterClassA
MessageBoxA
EndPaint
GetMenuItemCount
MessageBeep
UpdateWindow
SystemParametersInfoA
GetCapture
FrameRect
GetMenuState
GetClassNameA
SetWindowPlacement
GetKeyboardState
WaitMessage
DrawEdge
CallNextHookEx
IsWindowEnabled
CharNextA
IsChild
ClientToScreen
LoadCursorA
ShowWindow
SetFocus
OffsetRect
GetSysColorBrush
GetSystemMenu
GetWindowRect
DestroyMenu
TranslateMDISysAccel
CheckMenuItem
SetMenuItemInfoA
GetWindowTextA
CharLowerBuffA
InsertMenuA
GetWindowDC
DefWindowProcA
CloseClipboard
MsgWaitForMultipleObjects
SetRect
GetKeyboardType
InflateRect
DrawTextA
CreateMenu
PtInRect
ChildWindowFromPoint
GetIconInfo
DrawIcon
GetPropA
TrackPopupMenu
GetScrollRange
CharNextW
SetCapture
SetMenu
DefMDIChildProcA
SetScrollRange
GetFocus
GetClassInfoA
SetPropA
GetActiveWindow
GetWindow
WindowFromPoint
GetClientRect
ShowOwnedPopups
DrawAnimatedRects
SetTimer
IsIconic
GetCursorPos
GetDC
GetMenuItemID
DestroyCursor
MapVirtualKeyA
GetDesktopWindow
RemovePropA
GetMessagePos
PostMessageA
IntersectRect
GetWindowThreadProcessId
MoveWindow
GetWindowLongW
IsZoomed
SetScrollPos
SendMessageA
DestroyIcon

kernel32

GetModuleFileNameA
GetVersionExA
GetUserDefaultLCID
HeapDestroy
LocalAlloc
WaitForSingleObject
GlobalAddAtomA
VirtualAlloc
FreeResource
GetEnvironmentStrings
SetEndOfFile
FindClose
GetCommandLineA
GetModuleHandleA
HeapAlloc
LockResource
DeleteCriticalSection
RaiseException
GetCurrentThread
SetLastError
ExitProcess
GetDateFormatA
MoveFileExA
WideCharToMultiByte
GetCurrentProcess
SizeofResource
lstrcmpiA
lstrcmpA
GetStringTypeA
GetOEMCP
lstrcpyA
GetLocaleInfoA
SetHandleCount
GetFileType
ResetEvent
LoadLibraryExA
LoadLibraryA
FindResourceA
VirtualQuery
SetErrorMode
GetVersion
SetThreadLocale
GetDiskFreeSpaceA
CompareStringA
MoveFileA
LocalFree
GetProcAddress
lstrlenA
VirtualFree
GetTickCount
ReadFile
Sleep
LoadResource
VirtualAllocEx
EnumCalendarInfoA
GetACP
CreateEventA
LocalReAlloc
GetFileSize
GetCurrentThreadId
GetLastError
FormatMessageA
GetProcessHeap
HeapFree
CreateFileA
lstrcpynA
InitializeCriticalSection
GetStringTypeW
lstrcatA
ExitThread
DeleteFileA
GetFileAttributesA
GetLocalTime
FreeLibrary
GetFullPathNameA
GlobalDeleteAtom
GlobalAlloc
WriteFile
GetCPInfo
CreateThread
GetStartupInfoA
GetSystemDefaultLangID
SetFilePointer
EnterCriticalSection

Sections

CODE
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13e5cda5a86930750480128fa5d00aac

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

Sections

CODE Size: 246KB - Virtual size: 245KB

.tls Size: 7KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 3KB

CODE
Size: 246KB - Virtual size: 245KB

.tls
Size: 7KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 3KB