16070014b86f2254dcf273bbce78fb6eca43df9a6fc3c6ab85ec8f06a4063b06

General

Target

16070014b86f2254dcf273bbce78fb6eca43df9a6fc3c6ab85ec8f06a4063b06
Size

1.3MB
MD5

4a49135d2ecc07085a8b7c5925a36c0a
SHA1

949da212307259f53b17eb19b353e7c1051fba82
SHA256

16070014b86f2254dcf273bbce78fb6eca43df9a6fc3c6ab85ec8f06a4063b06
SHA512

2a5c82c11943eb833faa9f4353dca78d6b4a3881051f212436d20f5673fccf7c84dd8c784bd97d5b6fc05557bcd3bd6095cc191af85e6ba91552b3a2ced6c964
SSDEEP

24576:T69osJP2l89UWjbr1X+EdJF377v8PyLka32yE2yQcKimHKfkiycMSR0:m91I8tdJDFL7v4yLkEcTQ5XKfkPch0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16070014b86f2254dcf273bbce78fb6eca43df9a6fc3c6ab85ec8f06a4063b06

Files

16070014b86f2254dcf273bbce78fb6eca43df9a6fc3c6ab85ec8f06a4063b06
.exe windows:6 windows x86 arch:x86

e2916e61cf628d68810ab9d391b657f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
VirtualAlloc
IsBadReadPtr
GetCurrentProcessId
GetTickCount
Sleep
ExitProcess
UnhandledExceptionFilter

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt

user32

GetDC
LoadCursorW
EndPaint
GetSystemMetrics
BeginPaint
PostQuitMessage
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
MoveWindow
LoadBitmapW
ReleaseDC

msvcrt

__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_controlfp
wcsrchr
_snwprintf
_wcsnicmp
_except_handler3
memset
memcpy
_wcsicmp
wcsncpy
wcsncat

ntdll

RtlUnwind

comctl32

ImageList_Destroy
ImageList_Add
ImageList_Create
InitCommonControlsEx
CreateToolbarEx

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2916e61cf628d68810ab9d391b657f4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

user32

msvcrt

ntdll

comctl32

Sections

.text Size: 120KB - Virtual size: 120KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 120KB - Virtual size: 120KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

.reloc
Size: 1024B - Virtual size: 4KB