45d57cd1f9524ae52b29b572273f442020df66c9fdad14b783658e3e8ae27794

General

Target

45d57cd1f9524ae52b29b572273f442020df66c9fdad14b783658e3e8ae27794
Size

10.1MB
MD5

228109ab5ba5d24d003e410483dd4f45
SHA1

26e23fc74e31d9ce9104565dc159ebc9a75380e6
SHA256

45d57cd1f9524ae52b29b572273f442020df66c9fdad14b783658e3e8ae27794
SHA512

8d525513a3ed165f37907fdde6ef9eb751b022e09d1379f09838a28fb64c87c8fab8aa1aa99eae31c5d0da453ee664f238dcbea0746d5b6ff52d6ff59a2372dd
SSDEEP

192:4BuVZO7BLOSDVSaU0DqitgZI/k0m17Z79KWnWBo:40ZkLOSDr/DSGNomWnWBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d57cd1f9524ae52b29b572273f442020df66c9fdad14b783658e3e8ae27794

Files

45d57cd1f9524ae52b29b572273f442020df66c9fdad14b783658e3e8ae27794
.dll windows x86

71b5365c62a650f7a757127f71824776

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemDirectoryA
GetDiskFreeSpaceExA
GetModuleHandleA
GetProcAddress
SetEvent
OpenEventA
CloseHandle
UnmapViewOfFile
MapViewOfFile
GetCurrentProcessId
VirtualQuery
MultiByteToWideChar

user32

DefWindowProcA
ActivateKeyboardLayout
PostMessageA
IsWindow
CreateWindowExA
ShowWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
UpdateWindow

msvcrt

_adjust_fdiv
malloc
_initterm
free
_except_handler3
sprintf

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71b5365c62a650f7a757127f71824776

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 592B

.rsrc Size: 4KB - Virtual size: 528B

.reloc Size: 4KB - Virtual size: 326B

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 592B

.rsrc
Size: 4KB - Virtual size: 528B

.reloc
Size: 4KB - Virtual size: 326B