1e22062c4809421fddf03b23eb13bbe1b6e044eadd6760215483bf95fd096b8a

Sharing

Copy URL Twitter E-mail

General

Target

1e22062c4809421fddf03b23eb13bbe1b6e044eadd6760215483bf95fd096b8a
Size

212KB
MD5

bc7a24129f87407ff6fbffb43f035e45
SHA1

250cca70e516a40356905bb1dd3ca007226b0d6b
SHA256

1e22062c4809421fddf03b23eb13bbe1b6e044eadd6760215483bf95fd096b8a
SHA512

34139970619657a17be584ef39491e0722d1b48f067b08f05678f150f4c025fd1d32828029ae2409a23c1126387426d316beb71b017b2e30f7b0317816facdcb
SSDEEP

6144:TxNqLW6opBZMU/y/JEGjg+op2BSNCCr7/jU:NA6NBT/yEGjWwa7vU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e22062c4809421fddf03b23eb13bbe1b6e044eadd6760215483bf95fd096b8a

Files

1e22062c4809421fddf03b23eb13bbe1b6e044eadd6760215483bf95fd096b8a
.exe windows:4 windows x86 arch:x86

cb466204f5c37666fe7d05c000308c29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GlobalFindAtomW
GetAtomNameW
GlobalGetAtomNameA
GetCalendarInfoW
RaiseException
Sleep
CreateDirectoryA
CreateFileA
SearchPathA
GetTempPathW
CreateDirectoryW
CreateNamedPipeA
CopyFileExA
lstrcmp
GetSystemDirectoryA
GetModuleHandleA
EndUpdateResourceW
GetStringTypeW
WriteFile
GetProcAddress
FreeLibrary
GetLocaleInfoW
FreeResource
FindAtomW
OpenMutexW
OpenSemaphoreA
IsValidCodePage
FileTimeToLocalFileTime
QueryPerformanceCounter
GetVersion
OpenSemaphoreW

user32

PeekMessageA
GetSysColor
GetKeyboardType
LoadCursorA
DialogBoxIndirectParamW
RemoveMenu
IsWindowEnabled
DialogBoxIndirectParamA
GetDlgItemTextA
GetCapture
AdjustWindowRect
SetCapture
CharNextW
ShowWindow
RegisterWindowMessageA
GetForegroundWindow
SendDlgItemMessageW
OffsetRect
GetDlgItem
LoadCursorW
UpdateWindow
LoadIconW
SetMenu
LoadBitmapA
EndMenu
CopyImage
ShowCursor
SetParent
MessageBoxIndirectW
WaitForInputIdle
RegisterClassExW
GetDC
InsertMenuW
EnableMenuItem
GetIconInfo
CheckRadioButton
FrameRect
SetWindowPos
GetMenuItemID
DialogBoxParamW
GetClassLongA
GetActiveWindow
GetMenuStringA
SetActiveWindow
FindWindowW
GetWindowRgn

gdi32

GetBitmapDimensionEx
MoveToEx
PolyBezier
GetTextExtentExPointW
ExtTextOutA
RealizePalette
StartDocA
GetEnhMetaFileBits
UpdateICMRegKeyA
GetRasterizerCaps
GetSystemPaletteUse

advapi32

RegReplaceKeyA
RegCreateKeyExW
RegFlushKey
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyA
RegCreateKeyExA

winmm

waveInStop
OpenDriver
waveOutGetErrorTextW

oledlg

OleUIUpdateLinksA
OleUIObjectPropertiesW
OleUIEditLinksW
OleUIEditLinksA
OleUIChangeSourceW

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bqtZlw
Size: 2KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.piDQ
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.XyHwD
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hJ
Size: 2KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Yj
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VxXS
Size: 1024B - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LadQl
Size: 1024B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zvc
Size: 2KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb466204f5c37666fe7d05c000308c29

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

winmm

oledlg

Sections

.text Size: 12KB - Virtual size: 11KB

.bqtZlw Size: 2KB - Virtual size: 35KB

.piDQ Size: 2KB - Virtual size: 6KB

.XyHwD Size: 3KB - Virtual size: 9KB

.hJ Size: 2KB - Virtual size: 18KB

.data Size: 13KB - Virtual size: 12KB

.Yj Size: 512B - Virtual size: 35KB

.VxXS Size: 1024B - Virtual size: 13KB

.LadQl Size: 1024B - Virtual size: 32KB

.zvc Size: 2KB - Virtual size: 241KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.bqtZlw
Size: 2KB - Virtual size: 35KB

.piDQ
Size: 2KB - Virtual size: 6KB

.XyHwD
Size: 3KB - Virtual size: 9KB

.hJ
Size: 2KB - Virtual size: 18KB

.data
Size: 13KB - Virtual size: 12KB

.Yj
Size: 512B - Virtual size: 35KB

.VxXS
Size: 1024B - Virtual size: 13KB

.LadQl
Size: 1024B - Virtual size: 32KB

.zvc
Size: 2KB - Virtual size: 241KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB