ebb612d56b16e4a6113f4037c69c1814

Sharing

Copy URL

Twitter E-mail

General

Target

ebb612d56b16e4a6113f4037c69c1814
Size

172KB
MD5

ebb612d56b16e4a6113f4037c69c1814
SHA1

842e9dd130c3821f51a1965237ae976d9ea7e327
SHA256

c3342dcc00dc6efc9193d40d5faf4bd9c754afc83a600f87e876c5736be96368
SHA512

e0a63b52b8086c5f8375535820de6653562cb20db3f7b7fc4b2543e5c71a849743c280e99382de01bf3375736597eec4bb6bda487856f5424786268aee438a11
SSDEEP

3072:Sl9ZKMKHAMHD3jTZ1SUuPpHPOjGrPeMEzZk3J2hdVb30LAoGyQu6R:+9ZKMKHNHD3jtGvOjeeMEte2hD3uQu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb612d56b16e4a6113f4037c69c1814

Files

ebb612d56b16e4a6113f4037c69c1814
.exe windows:4 windows x86 arch:x86

0309c27ba898c59ab943ba3a6d30eedf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
ord6

kernel32

CloseHandle
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
OpenFileMappingA
GetCommandLineA
LocalFree
LocalUnlock
LocalLock
LocalAlloc
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
CompareStringW
CompareStringA
GetSystemTimeAsFileTime
GetTimeZoneInformation
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
CreateFileA
ReadFile
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetModuleFileNameA
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess

user32

CheckRadioButton
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
GetDlgItem
EnableWindow
GetDlgItemTextA
EndDialog
SendDlgItemMessageA
GetMenu
EnableMenuItem
GetMenuItemCount
RemoveMenu
BeginPaint
GetClientRect
DrawTextA
EndPaint
MoveWindow
DialogBoxParamA
InvalidateRect
wsprintfA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
RegisterWindowMessageA
IsWindow
SetTimer
PostMessageA
GetMessageA
PostQuitMessage
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
KillTimer
ShowWindow
CreateWindowExA
SendMessageA
UpdateWindow
DestroyWindow
GetForegroundWindow
GetWindowThreadProcessId
IsIconic
GetAsyncKeyState
MessageBeep
MessageBoxA
GetDlgItemInt

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0309c27ba898c59ab943ba3a6d30eedf

Headers

File Characteristics

Imports

comctl32

kernel32

user32

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 35KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 35KB

.rsrc
Size: 20KB - Virtual size: 18KB