a9c993032898a4ed33aff16d6721df4eb75fa426c6d2f09d4c19c31dd4d9deef

Sharing

Copy URL

Twitter E-mail

General

Target

a9c993032898a4ed33aff16d6721df4eb75fa426c6d2f09d4c19c31dd4d9deef
Size

17KB
MD5

de5e591f61e4b7ae411f3b8637a8cb06
SHA1

9dcbd44495b4f7c051f3ecd92ac03b14de8af8c4
SHA256

a9c993032898a4ed33aff16d6721df4eb75fa426c6d2f09d4c19c31dd4d9deef
SHA512

cb52e9219d766b70ecd1c46f028b5a4185fc6ac00bce3e3a8a1d9bc4a6c9bfad6580364bb5bd99ca6b8f65da4eeda68e265e8e33af30d39a62bc274148b9ce00
SSDEEP

192:bmhZDx2b5TixN6WWhoTkN9w5j8d+yaW1v+oHqEvB7R1KZO+PcqDezNkInUwR:yhZdoASWx5g/+oHqEvB7KL0o/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9c993032898a4ed33aff16d6721df4eb75fa426c6d2f09d4c19c31dd4d9deef

Files

a9c993032898a4ed33aff16d6721df4eb75fa426c6d2f09d4c19c31dd4d9deef
.dll windows:4 windows x86 arch:x86

338ade621fd2ea190d1c235a0a49c852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libglib-2.0-0

g_free
g_strdup_printf

libgobject-2.0-0

g_signal_connect_data
g_type_check_instance_cast

libgtk-win32-2.0-0

gtk_alignment_new
gtk_box_get_type
gtk_box_pack_start
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_events_pending
gtk_label_get_type
gtk_label_new
gtk_label_set_text
gtk_main_iteration
gtk_progress_bar_get_type
gtk_progress_bar_new
gtk_progress_bar_set_fraction
gtk_vbox_new
gtk_widget_destroy
gtk_widget_get_type
gtk_widget_show_all
gtk_window_get_type
gtk_window_new
gtk_window_set_position
gtk_window_set_resizable
gtk_window_set_title

intl

libintl_fprintf
libintl_gettext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
realloc
strlen
strncmp
vfprintf

Exports

Exports

show_progress

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 972B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

338ade621fd2ea190d1c235a0a49c852

Headers

File Characteristics

Imports

libglib-2.0-0

libgobject-2.0-0

libgtk-win32-2.0-0

intl

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 1024B - Virtual size: 856B

.bss Size: - Virtual size: 972B

.edata Size: 512B - Virtual size: 81B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 588B

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 1024B - Virtual size: 856B

.bss
Size: - Virtual size: 972B

.edata
Size: 512B - Virtual size: 81B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 588B