b0404029838cae5527dfa1aae9a936dbf7c3cc7799229fface196ffeaa3a2c8e[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

b0404029838cae5527dfa1aae9a936dbf7c3cc7799229fface196ffeaa3a2c8e.exe
Size

208KB
MD5

75f7c2024b21a897ea58beaed7972ded
SHA1

432278fa5d2b432ab47a513c8325094176d44bca
SHA256

b0404029838cae5527dfa1aae9a936dbf7c3cc7799229fface196ffeaa3a2c8e
SHA512

636427154530cfe620b4284076968c5ca8f79967143ddee300b475db98c0bc954992f79c87946150dc6c3987a429b3873bdc627ad16a36c5f822a2ca473653a8
SSDEEP

6144:JZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5K:bquCuygMQjd5vJIBP1h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0404029838cae5527dfa1aae9a936dbf7c3cc7799229fface196ffeaa3a2c8e.exe

Files

b0404029838cae5527dfa1aae9a936dbf7c3cc7799229fface196ffeaa3a2c8e.exe
.exe windows:4 windows x86 arch:x86

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA

user32

GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor

gdi32

CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx

advapi32

RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey

shlwapi

StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW

opengl32

glReadBuffer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.PwM
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OwvyT
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MTxF
Size: 1KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XWRUxX
Size: 1KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.YCYo
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tKhtUt
Size: 2KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

520c130e82cbe6120da2d52c754c2522

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

opengl32

Sections

.text Size: 12KB - Virtual size: 11KB

.PwM Size: 1KB - Virtual size: 10KB

.OwvyT Size: 3KB - Virtual size: 26KB

.MTxF Size: 1KB - Virtual size: 37KB

.XWRUxX Size: 1KB - Virtual size: 40KB

.data Size: 11KB - Virtual size: 11KB

.YCYo Size: 1KB - Virtual size: 8KB

.tKhtUt Size: 2KB - Virtual size: 221KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.PwM
Size: 1KB - Virtual size: 10KB

.OwvyT
Size: 3KB - Virtual size: 26KB

.MTxF
Size: 1KB - Virtual size: 37KB

.XWRUxX
Size: 1KB - Virtual size: 40KB

.data
Size: 11KB - Virtual size: 11KB

.YCYo
Size: 1KB - Virtual size: 8KB

.tKhtUt
Size: 2KB - Virtual size: 221KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB