e81a5d70c2c195725243fddec1c750d7a8e23782486c50cc41e094a9d91f7af4

Sharing

Copy URL Twitter E-mail

General

Target

e81a5d70c2c195725243fddec1c750d7a8e23782486c50cc41e094a9d91f7af4
Size

203KB
MD5

b7c68d7803bbce810e7181b00d223015
SHA1

ce46b8eba96c751f099208a6b382fb7f09b0d105
SHA256

e81a5d70c2c195725243fddec1c750d7a8e23782486c50cc41e094a9d91f7af4
SHA512

746002431aa1c85634c941d0774d1c1a2541636d0fd530ebf576acd873c325fb031fabea93a380c50dac2491b6c17606a2ccd79c8362b56881a19ddd18593899
SSDEEP

3072:t1g2ZB+GEhO118/bPyKxM4QTJt2cWGsNPKisJoyjK7yGAe9Q0enyU8GZqaP+wPml:zhYzxMlNNsAisDRGAL0eyUBnPrPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e81a5d70c2c195725243fddec1c750d7a8e23782486c50cc41e094a9d91f7af4

Files

e81a5d70c2c195725243fddec1c750d7a8e23782486c50cc41e094a9d91f7af4
.exe windows:4 windows x86 arch:x86

3b42f9693bdd770281b738cfac146ecf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
lstrcpynW
GetModuleFileNameA
GetFileType
GetEnvironmentStringsA
GetProcAddress
BeginUpdateResourceW
GetCurrentThreadId
CreateMailslotW
AddAtomA
lstrlen
GetEnvironmentStringsW
GetExpandedNameA
WinExec
GetCurrentProcessId
GetThreadPriority
FindAtomA
OpenWaitableTimerW
GetModuleHandleA
GetLocaleInfoA
GetDateFormatA
GetShortPathNameW

user32

GetParent
CreateWindowExA
SetDlgItemTextW
DestroyIcon
GetDlgItemInt
IsWindow
IsMenu
PostMessageA
SetWindowLongW
GetWindowTextW
CallWindowProcW
GetCapture
GetSubMenu
InvalidateRect
DestroyWindow
GetDlgItem
WinHelpA
GetSystemMetrics
SetCursorPos
CreateCaret
CascadeWindows
EnumDesktopsA
GetDCEx
EndDialog
CreatePopupMenu
GetMessageA
GetCursorPos
CreateAcceleratorTableW
GetTopWindow
SetWindowRgn
SendMessageA

gdi32

ColorMatchToTarget
CreateCompatibleDC
Pie
CopyMetaFileW
ExtTextOutW
GetTextColor
SetColorAdjustment
CreatePatternBrush
SetMetaRgn
ExtFloodFill
GetEnhMetaFileDescriptionA
SetTextColor
ExtSelectClipRgn
AddFontResourceW
EndDoc
GetTextFaceW
GetCharacterPlacementA
GetMetaFileA

advapi32

RegOpenKeyW
RegFlushKey
RegOpenKeyA

shlwapi

GetMenuPosFromID
PathUnmakeSystemFolderA
UrlIsNoHistoryW
PathIsURLA
SHCreateShellPalette
PathRemoveArgsW
SHCopyKeyW
SHRegOpenUSKeyA
PathSearchAndQualifyW

Sections

.eX
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ah
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wc
Size: 512B - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cKgaFt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JbcCcw
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b42f9693bdd770281b738cfac146ecf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.eX Size: 12KB - Virtual size: 11KB

.ah Size: 2KB - Virtual size: 31KB

.wc Size: 512B - Virtual size: 402KB

.cKgaFt Size: 8KB - Virtual size: 8KB

.JbcCcw Size: 5KB - Virtual size: 11KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1024B - Virtual size: 928B

.eX
Size: 12KB - Virtual size: 11KB

.ah
Size: 2KB - Virtual size: 31KB

.wc
Size: 512B - Virtual size: 402KB

.cKgaFt
Size: 8KB - Virtual size: 8KB

.JbcCcw
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1024B - Virtual size: 928B