e20144978c8bf189903541e6c5084f98

Sharing

Copy URL Twitter E-mail

General

Target

e20144978c8bf189903541e6c5084f98
Size

25KB
MD5

e20144978c8bf189903541e6c5084f98
SHA1

7ffd1329f009ed944fa8c4f55f584493214652ac
SHA256

367c904fd12b416364ec751bde0379f5a06ea194f044f389cb056dc21f1047d2
SHA512

d6e0d5e65af165bd1c82b5c67e11c3cb98afcc92a0e9047fe117dfa66a5346b462ff16a7b087f8bff866daae4b73414af73c6be7f3e750e6ecb6acbfbfe4fe8f
SSDEEP

768:ED7C54Ojfr4Vf/IDRRhGnIaSBqQ4kbXX5:Iwfr4VHWfGIaYZbXp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e20144978c8bf189903541e6c5084f98

Files

e20144978c8bf189903541e6c5084f98
.exe windows:4 windows x86 arch:x86

42c36d4d509d5d668ad8380a676859d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptVerifySignatureW
GetSidSubAuthorityCount
LookupAccountSidW
QueryServiceObjectSecurity
DeleteService
GetUserNameW
UnlockServiceDatabase
SetPrivateObjectSecurity
CryptSetProviderA
GetUserNameA
RegOpenKeyW
SetSecurityDescriptorGroup
NotifyChangeEventLog
GetNamedSecurityInfoA
OpenBackupEventLogA
RegLoadKeyA
GetSecurityDescriptorOwner
GetAccessPermissionsForObjectW
CryptEnumProvidersA
ObjectOpenAuditAlarmA
RegReplaceKeyW
CryptHashData
RegOpenKeyA

gdi32

ModifyWorldTransform
SetBoundsRect
GetObjectW
GetCharABCWidthsA
GetMiterLimit
GetRegionData
CreatePen
GetEnhMetaFileA
GetTextExtentPoint32A
FillPath
EnumFontFamiliesA
GetGraphicsMode
GetKerningPairsW
SetWindowExtEx
GetMetaRgn
FrameRgn
GetTextMetricsA
CloseFigure
GetSystemPaletteUse
CreateFontW
GetObjectA
EnableEUDC
GetViewportExtEx
GdiPlayJournal
GetObjectType
GetViewportOrgEx
SetICMProfileA
SetBkMode
GetBkColor
GetTextMetricsW
CreateCompatibleBitmap

user32

GetQueueStatus
TabbedTextOutW
GetWindowPlacement
EndDialog
SetCapture
CloseWindow
DdeImpersonateClient
SetClipboardData
SetMenuDefaultItem
CopyRect
AppendMenuW
MoveWindow
LoadAcceleratorsW
GetUserObjectInformationA
ChangeDisplaySettingsExW
WindowFromDC
DdeQueryNextServer
UnregisterDeviceNotification
DdeConnectList
GetWindowTextW
EnableWindow
CharNextA
SetSysColorsTemp
GetDialogBaseUnits
MessageBoxIndirectA
GetMenuItemInfoA
SendMessageCallbackW
GetUpdateRect
CopyAcceleratorTableA
BlockInput
GrayStringW
CharLowerBuffA
InflateRect

kernel32

VirtualAlloc
lstrcmpiW
PulseEvent
ReleaseMutex
GetComputerNameW
lstrcmpiA
GetStartupInfoW
lstrcmpA
VirtualFree
GetConsoleOutputCP
GetSystemDefaultLangID
GetConsoleTitleW
GetPrivateProfileSectionA
GetSystemTime
GetMailslotInfo
GlobalFindAtomA
lstrlenW
GetModuleHandleA
IsBadHugeWritePtr
GetEnvironmentVariableA
ResetWriteWatch
GetVersion
GetLocalTime
GlobalFindAtomW
ReadConsoleW
SetCommState
UnmapViewOfFile
HeapValidate
GetConsoleScreenBufferInfo
SetFileApisToANSI
lstrlenA
lstrcmpW
GetModuleHandleW
Sleep
SetCommTimeouts
ExitProcess
GetLocaleInfoW
ReadConsoleA
PeekConsoleInputW
LocalReAlloc
WaitNamedPipeW
FlushConsoleInputBuffer
ReadConsoleOutputAttribute
CreateDirectoryW

ole32

HENHMETAFILE_UserFree
ReadFmtUserTypeStg
HPALETTE_UserMarshal
CoLockObjectExternal
CoGetClassObject
SetErrorInfo
HMENU_UserMarshal
CoRegisterMessageFilter
DllRegisterServer
CreateOleAdviseHolder
OleRegEnumFormatEtc
ReleaseStgMedium
CoAddRefServerProcess

msvcrt

scanf
_beginthreadex
wcsftime
_splitpath
__p__iob
_eof
iswxdigit
iswcntrl
rewind
_CIsin
vsprintf
_CItanh
time
fgetwc
_wexecvpe
__p__pctype
_wsplitpath
_ismbcgraph
rename
_osver
_execv
_yn
_rmtmp
_wcsupr
_pgmptr
iswalnum
isalnum
_mbscoll

Sections

.text
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ukgt
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nlyt
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.moad
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42c36d4d509d5d668ad8380a676859d4

Headers

File Characteristics

Imports

advapi32

gdi32

user32

kernel32

ole32

msvcrt

Sections

.text Size: 16KB - Virtual size: 17KB

.ukgt Size: 3KB - Virtual size: 8KB

.nlyt Size: 2KB - Virtual size: 8KB

.moad Size: 2KB - Virtual size: 23KB

.reloc Size: 1024B - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 17KB

.ukgt
Size: 3KB - Virtual size: 8KB

.nlyt
Size: 2KB - Virtual size: 8KB

.moad
Size: 2KB - Virtual size: 23KB

.reloc
Size: 1024B - Virtual size: 1KB