964eefa3ae1b277f5b2d4e39392e6d910a65ffe0c4074a02596e42930984fe2b

General

Target

964eefa3ae1b277f5b2d4e39392e6d910a65ffe0c4074a02596e42930984fe2b
Size

56KB
MD5

e35f80dd6cca06370875e5eb87f95e6a
SHA1

23b15650e326eb81b8284005b14fba527bd78d78
SHA256

964eefa3ae1b277f5b2d4e39392e6d910a65ffe0c4074a02596e42930984fe2b
SHA512

f44ec6872d5dca6562cd18e3ecd551bc4c04a8ba0ad8f1dd095a8c0a7d7bea302267bc6a7f0fc014ce9081ed86ece0c59c7ed6d1216222baa7605a406934ae37
SSDEEP

384:+sOemH4CVY8A3Dzs9TmmJO1NIY5cjTQ+8sO7ZwGeJhOKgyLKDZbKDpLKDj4oKDPv:Bpcu2m11NBm1O7Zwt/OKg1wnC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
964eefa3ae1b277f5b2d4e39392e6d910a65ffe0c4074a02596e42930984fe2b

Files

964eefa3ae1b277f5b2d4e39392e6d910a65ffe0c4074a02596e42930984fe2b
.exe windows:5 windows x86

7bc40c14f412d96dc9b48f165ce6b094

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

WideCharToMultiByte
lstrcpyA
lstrcatA
MultiByteToWideChar
lstrlenA
GetWindowsDirectoryA
LocalFree
FormatMessageA
FindNextFileA
lstrcmpA
FindFirstFileA
DeleteFileA
lstrcmpiA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA

user32

GetDesktopWindow
MessageBoxA
CharNextA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx

oleaut32

SysAllocString
VariantInit

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7bc40c14f412d96dc9b48f165ce6b094

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

ole32

oleaut32

shell32

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 24KB - Virtual size: 24KB