f1ed61e1cf058e18d713a05fc9567b44f271e8181129ca224ec6c66b94c42fb1

General

Target

f1ed61e1cf058e18d713a05fc9567b44f271e8181129ca224ec6c66b94c42fb1
Size

90KB
MD5

2133a98611801bb872d450aa849dd953
SHA1

8796bf757c3eb5a50d97e2ff754d17be6cd44763
SHA256

f1ed61e1cf058e18d713a05fc9567b44f271e8181129ca224ec6c66b94c42fb1
SHA512

3525c646e3d028f3dc3c7fb9f9d98caad082eabb0476e31e217549789219b523098b6cf5723b4bee96bb4a2e26a69c17fb48ba60ae082420f2231a3b301b98e4
SSDEEP

768:7bE6MOnYC3IP2Pyegd5WlvMFNuAOVl7JlZq:U6M6YuadwlvcUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1ed61e1cf058e18d713a05fc9567b44f271e8181129ca224ec6c66b94c42fb1

Files

f1ed61e1cf058e18d713a05fc9567b44f271e8181129ca224ec6c66b94c42fb1
.dll windows:4 windows x86 arch:x86

e241ec659b2ad59a72e54a6c63f5c9d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyn
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
WaitForSingleObject
CreateMutexA
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
VirtualAlloc
GetCommandLineA
GetModuleHandleA

msvcrt

??2@YAPAXI@Z
free
strncmp
__CxxFrameHandler
__dllonexit
_onexit
atoi
_ftol
strrchr
strchr
??3@YAXPAX@Z
memmove
malloc

user32

PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA

Exports

Exports

Mek
Mek1

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e241ec659b2ad59a72e54a6c63f5c9d0

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 27KB - Virtual size: 28KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 54KB - Virtual size: 56KB

.CRT Size: 512B - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 27KB - Virtual size: 28KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 54KB - Virtual size: 56KB

.CRT
Size: 512B - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB