45c262462ae17dadd38fe2ff0f2b082b5474fdc2e5a73477fcc86874b35ec0bc

Sharing

Copy URL Twitter E-mail

General

Target

45c262462ae17dadd38fe2ff0f2b082b5474fdc2e5a73477fcc86874b35ec0bc
Size

2.8MB
MD5

344cac30880d177a5e143a2e455e5d4f
SHA1

9a6fd95f710461857b8a73328ad8ca10556ad557
SHA256

45c262462ae17dadd38fe2ff0f2b082b5474fdc2e5a73477fcc86874b35ec0bc
SHA512

0774b81c3f414795a54b41052b0d3dc2ec5fc933acbfcf1315a5dad8e840be9b3e0594bdd2d32cd7623e86dce38b73e8b070bddc80de0d2ff71ec0c27a8ae03a
SSDEEP

49152:4z+eMPFrCdLqdfexDeiY0f6j235rJKeIuY+di6jOcFnwS0:C/MEd/DxG23z33i6jOcWt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45c262462ae17dadd38fe2ff0f2b082b5474fdc2e5a73477fcc86874b35ec0bc

Files

45c262462ae17dadd38fe2ff0f2b082b5474fdc2e5a73477fcc86874b35ec0bc
.exe windows x86

42303cafb8bc157e808251bcee1b8a2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp140d

?_XGetLastError@std@@YAXXZ

mfc140u

ord1472

kernel32

EnterCriticalSection

user32

MessageBoxA

shell32

DragQueryFileW

comctl32

InitCommonControlsEx

ole32

CoCreateGuid

oleaut32

SysAllocStringByteLen

vcruntime140

_purecall

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

system

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-utility-l1-1-0

rand

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

Sections

.text
Size: 1.7MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42303cafb8bc157e808251bcee1b8a2c

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140d

mfc140u

kernel32

user32

shell32

comctl32

ole32

oleaut32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

msvcrt

iphlpapi

psapi

advapi32

Sections

.text Size: 1.7MB - Virtual size: 3.1MB

.sedata Size: 1.1MB - Virtual size: 1.1MB

.idata Size: 2KB - Virtual size: 4KB

.rsrc Size: 81KB - Virtual size: 84KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 1.7MB - Virtual size: 3.1MB

.sedata
Size: 1.1MB - Virtual size: 1.1MB

.idata
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 81KB - Virtual size: 84KB

.sedata
Size: 4KB - Virtual size: 4KB