04b5fe7818bae1336275789510cf1a58b03a6f218a3631b2458a77ea177dcb17

General

Target

04b5fe7818bae1336275789510cf1a58b03a6f218a3631b2458a77ea177dcb17
Size

63KB
MD5

1661aab32a97e56bc46181009ebd80c9
SHA1

e70f9badb8c97296b11732b63b4e512640249712
SHA256

04b5fe7818bae1336275789510cf1a58b03a6f218a3631b2458a77ea177dcb17
SHA512

34e6fd1dd650f49b40970faf2f8077b3d98662e9ba1573256ad5cd6ad258781851ddb50de4992134c358b222ca63673785a8050b82165b52576231bb3be59db5
SSDEEP

1536:2zeu0UgHNiKkrMFq6ANr4vo9FA7ssdi2x:ENr8mf4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04b5fe7818bae1336275789510cf1a58b03a6f218a3631b2458a77ea177dcb17

Files

04b5fe7818bae1336275789510cf1a58b03a6f218a3631b2458a77ea177dcb17
.exe windows:4 windows x86

266aaaa284a078cc0bbee537b2c63ffc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ChooseColorA

kernel32

FileTimeToDosDateTime
SetFilePointerEx
InterlockedDecrement
MulDiv
IsDebuggerPresent
GetProcAddress
InterlockedIncrement

comctl32

FlatSB_SetScrollPos
ImageList_EndDrag
ImageList_Copy
ImageList_SetFlags
ImageList_BeginDrag
PropertySheetA
FlatSB_SetScrollRange
FlatSB_SetScrollProp
LBItemFromPt
MenuHelp
FlatSB_GetScrollProp
InitCommonControlsEx
_TrackMouseEvent
CreateStatusWindowA
CreateUpDownControl
ImageList_AddIcon
GetMUILanguage
CreatePropertySheetPageA
ImageList_Add
ImageList_Create
ImageList_GetIcon
FlatSB_ShowScrollBar
ImageList_SetBkColor
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollPos
ImageList_SetFilter
ShowHideMenuCtl
ImageList_Destroy
GetEffectiveClientRect
CreateStatusWindowW
FlatSB_GetScrollInfo

user32

EndDialog
RegisterDeviceNotificationW
GetDoubleClickTime
SendMessageA
LoadCursorA
LockSetForegroundWindow
SetLastErrorEx
GetSysColorBrush
DialogBoxParamW
BroadcastSystemMessageW
ChildWindowFromPoint

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

266aaaa284a078cc0bbee537b2c63ffc

Headers

File Characteristics

Imports

comdlg32

kernel32

comctl32

user32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 2KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 6KB

.rsrc Size: 4KB - Virtual size: 4KB

.xdata Size: 9KB - Virtual size: 8KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 4KB

.xdata
Size: 9KB - Virtual size: 8KB