b5e81bdb34fce28f1c9c29e99a4e430718fe3300e586bbee6207cf3a502216f6N

Sharing

Copy URL Twitter E-mail

General

Target

b5e81bdb34fce28f1c9c29e99a4e430718fe3300e586bbee6207cf3a502216f6N
Size

437KB
MD5

3f79c2aee6a9319b263e65dc5899b2d0
SHA1

757001065e1a58bf931bb1a0fc3be074710d11f1
SHA256

b5e81bdb34fce28f1c9c29e99a4e430718fe3300e586bbee6207cf3a502216f6
SHA512

1a2b3376b330add86c4d45b800874d346b02ce5d7937c82649e2a021456c69483401f1992af1d27b10e5a476aefe563704dfcc825d948a1ec921dbfa1039cd3a
SSDEEP

3072:ZzkAx/+w94P18cGg0fpeubppyhGCSdCxHlglRAq0dsshvtOKrUBb4tchxPyuyvmZ:ZIAAQa0xeQyhGElUR+sTKK7ByuGA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e81bdb34fce28f1c9c29e99a4e430718fe3300e586bbee6207cf3a502216f6N

Files

b5e81bdb34fce28f1c9c29e99a4e430718fe3300e586bbee6207cf3a502216f6N
.exe windows:5 windows x86 arch:x86

952c50d4ccf6a210bb26813aac82140c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultUILanguage
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
MapViewOfFile
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
GetUserDefaultLCID
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
GetTimeFormatW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileInformationByHandle
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetACP
FormatMessageW
FoldStringW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateFileMappingW
CompareStringW
ReadFile
CloseHandle
GetModuleHandleA
GetProcAddress
SetEndOfFile

user32

GetMenu
GetMenuState
GetMessageW
GetParent
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetScrollPos
SetWinEventHook
SetWindowLongW
SetWindowPlacement
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnhookWinEvent
UpdateWindow
WinHelpW
wsprintfW
GetKeyboardLayout
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
LoadIconW
LoadIconA
GetDlgItem

gdi32

AbortDoc
CreateDCW
CreateFontIndirectW
DeleteDC
DeleteObject
EndDoc
EndPage
EnumFontsW
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
CreateDCA
GetTextMetricsW
LPtoDP
SelectObject
SetAbortProc
SetBkMode
SetMapMode
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
TextOutW
GetTextFaceW
GetStockObject

advapi32

RegOpenKeyExA

msvcrt

__getmainargs
_acmdln
_cexit
_exit
_initterm
exit
memcpy

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataR2
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

952c50d4ccf6a210bb26813aac82140c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.text2 Size: 2KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 1KB

.dataR2 Size: 368KB - Virtual size: 367KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 7KB - Virtual size: 6KB

.text2
Size: 2KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 1KB

.dataR2
Size: 368KB - Virtual size: 367KB

.rsrc
Size: 52KB - Virtual size: 52KB