16220040ee6f1dd5e69a0c8bbc21649caec349c6fcf8ee61df7d75ec55cbd72c[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

16220040ee6f1dd5e69a0c8bbc21649caec349c6fcf8ee61df7d75ec55cbd72c.exe
Size

218KB
MD5

eb80e739055bbbfdf5dd5e01566a9b1b
SHA1

97b4a1e6fa94901519d693f42b01986dcfc2ce8e
SHA256

16220040ee6f1dd5e69a0c8bbc21649caec349c6fcf8ee61df7d75ec55cbd72c
SHA512

926f5f9b07c8c909e4c4b23144e320af4fd06c2f4810f52157ad9c7964490a4e616ef688ccd2e99e83142531dc6f8281f07b78081aa710d553adcdbb088e9f5b
SSDEEP

6144:LEQBDdO1z7L/EIhZDE9oLfFWlMZT7+DGaMwICW:LEGDdQNHEwWlMxYG/wIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16220040ee6f1dd5e69a0c8bbc21649caec349c6fcf8ee61df7d75ec55cbd72c.exe

Files

16220040ee6f1dd5e69a0c8bbc21649caec349c6fcf8ee61df7d75ec55cbd72c.exe
.exe windows:4 windows x86 arch:x86

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
EnumCalendarInfoA
DisconnectNamedPipe
MoveFileA
lstrcpyn
GetCommandLineA
GetSystemDirectoryW
GetEnvironmentVariableA
IsBadStringPtrA
FindAtomW
ReadDirectoryChangesW
GetFullPathNameW
GetFileAttributesA
ExitThread
LoadLibraryA
lstrlenA
lstrlen
FindResourceA
FindResourceW
GetTempPathW
GetFullPathNameA
OpenMutexW
SearchPathW
GetProcAddress
EnumTimeFormatsW
GetLocaleInfoW
EnumTimeFormatsA
GetCPInfo
OpenMutexA
GetThreadPriority
LoadResource
CreateFileMappingA
GetNamedPipeInfo
lstrcpynW
CompareStringW
OpenFile
IsBadCodePtr
GetDiskFreeSpaceA
GetTimeFormatW
FindAtomA
GlobalGetAtomNameW
MultiByteToWideChar
CreateMailslotW

user32

LoadMenuIndirectW
GetDC
SetCursorPos
OpenClipboard
CreateAcceleratorTableA
OffsetRect
IsDlgButtonChecked
LoadMenuIndirectA
GetMessageW
WinHelpA
UpdateWindow
IsMenu
GetKeyState
UnregisterClassA
DestroyIcon
ShowWindow
SetFocus
TrackPopupMenuEx

gdi32

GetLogColorSpaceW
EnumFontFamiliesW
CreateICW
OffsetClipRgn
SetRectRgn
SetTextColor
PlayEnhMetaFile
CreateFontIndirectExW
GetOutlineTextMetricsW
GetBrushOrgEx
SetEnhMetaFileBits
StartDocW
GetObjectA

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegQueryValueW
RegReplaceKeyW
RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyA
RegRestoreKeyW

shell32

SHGetDataFromIDListA
SHGetFileInfoA

shlwapi

StrStrW
SHOpenRegStream2A
StrToIntA
PathParseIconLocationA
PathSkipRootW
StrToIntExA
PathCreateFromUrlA
StrCmpNIW
StrChrNIW
UrlIsOpaqueA

ole32

CoGetCurrentProcess
CLSIDFromString

winmm

midiOutSetVolume
mxd32Message
mmioClose
mciSendStringW
mmioSendMessage
mixerGetLineControlsW
mmTaskBlock

Sections

.ma
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obptK
Size: 5KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Wv
Size: 2KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UeARA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rddrej
Size: 3KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.roXfGq
Size: 3KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BOJdrg
Size: 3KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IU
Size: 3KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.y
Size: 512B - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 109KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kzG
Size: 1KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cMrd
Size: 512B - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e5df9fb7e893bd2efa286b6326edce6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

winmm

Sections

.ma Size: 6KB - Virtual size: 6KB

.obptK Size: 5KB - Virtual size: 197KB

.Wv Size: 2KB - Virtual size: 341KB

.UeARA Size: 9KB - Virtual size: 9KB

.rddrej Size: 3KB - Virtual size: 396KB

.roXfGq Size: 3KB - Virtual size: 458KB

.BOJdrg Size: 3KB - Virtual size: 37KB

.IU Size: 3KB - Virtual size: 473KB

.y Size: 512B - Virtual size: 148KB

.data Size: 109KB - Virtual size: 332KB

.kzG Size: 1KB - Virtual size: 205KB

.cMrd Size: 512B - Virtual size: 162KB

.rsrc Size: 68KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 634B

.ma
Size: 6KB - Virtual size: 6KB

.obptK
Size: 5KB - Virtual size: 197KB

.Wv
Size: 2KB - Virtual size: 341KB

.UeARA
Size: 9KB - Virtual size: 9KB

.rddrej
Size: 3KB - Virtual size: 396KB

.roXfGq
Size: 3KB - Virtual size: 458KB

.BOJdrg
Size: 3KB - Virtual size: 37KB

.IU
Size: 3KB - Virtual size: 473KB

.y
Size: 512B - Virtual size: 148KB

.data
Size: 109KB - Virtual size: 332KB

.kzG
Size: 1KB - Virtual size: 205KB

.cMrd
Size: 512B - Virtual size: 162KB

.rsrc
Size: 68KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 634B