ea61840516719d4daba3e935ad2a7ff0N[.]exe

General

Target

ea61840516719d4daba3e935ad2a7ff0N.exe
Size

36KB
MD5

ea61840516719d4daba3e935ad2a7ff0
SHA1

b4c53035a10c9ee90f574206625e0f928dc8d686
SHA256

bf18d14870848b5693449ac9dbf010100a3c959aebf0ccce8b73a9a24e6db7b0
SHA512

50465e6c91c42cf35daaff7486c786e1eeff2a1dbcdaf07e8481b922e27c188a5fd4c35185834abf33ed7fd30b21b4aac63385d9475fb69a8cfb3ec0e4b78bae
SSDEEP

384:9uUN7Po5KxIBMT4QKoerb3NJi9RcZmyC8DrJgY:c8LujNnX3NJv1LDr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea61840516719d4daba3e935ad2a7ff0N.exe

Files

ea61840516719d4daba3e935ad2a7ff0N.exe
.dll windows:4 windows x86 arch:x86

bbf7382f50e49306a8af4aaa281663ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

u32misc

ord21
ord44
ord20

kernel32

GetModuleFileNameA
GlobalUnlock
lstrcpyA
GlobalLock
_lwrite
_lread
_llseek
GetProfileIntA
lstrcatA
lstrlenA
GetProfileStringA

user32

ScreenToClient
MoveWindow
EnableWindow
DialogBoxParamA
CharLowerA
SetDlgItemTextA
EndDialog
GetDlgItem
CharPrevA
ReleaseDC
CharNextA
CharUpperA
wsprintfA
LoadStringA
GetWindowRect
GetDC
ShowWindow

gdi32

GetDeviceCaps

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

u32comm

ucGlobalAlloc
ucGlobalFree
ucGlobalReAlloc

msvcrt

memmove
malloc
_adjust_fdiv
free
_initterm

Exports

Exports

DlgProcPxrInfo
ufDLLGetFileFmtNum
ufPxrFileRead
ufPxrFileReadVector
ufPxrFileWrite
ufPxrFileWriteVector
ufPxrGetFileData
ufPxrGetFormatInfo
ufPxrGetOffsetTable
ufPxrGetPreviewImage
ufPxrShowDlgFileData
ufPxrShowDlgOpenOption
ufPxrShowDlgSaveOption

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbf7382f50e49306a8af4aaa281663ec

Headers

File Characteristics

Imports

u32misc

kernel32

user32

gdi32

version

u32comm

msvcrt

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 732B

.text
Size: 12KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 732B