58d43c8c3fb63dd641925c7b2edb3b899310dc2553324fddb28036050ef9f7fe

Sharing

Copy URL Twitter E-mail

General

Target

58d43c8c3fb63dd641925c7b2edb3b899310dc2553324fddb28036050ef9f7fe
Size

52KB
MD5

b66be15f02434709cb7a7281690e016c
SHA1

ec1f0de3a1c44041f8be765048a29b366ee126ea
SHA256

58d43c8c3fb63dd641925c7b2edb3b899310dc2553324fddb28036050ef9f7fe
SHA512

b2bbb6697966abfeb867da35fb48a78eaabe3efcae09a85973d183ecee6d3daa805557a5142c7ec542b3a4d4525e1550dd05c8f616be692a49c6fb10bfaffad6
SSDEEP

768:zieedlIUCUTL4VV3UH3HZTEicvObwmrsdEJbGJo+Qfl:zNkxCUTzH3dfA3aJCoT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58d43c8c3fb63dd641925c7b2edb3b899310dc2553324fddb28036050ef9f7fe

Files

58d43c8c3fb63dd641925c7b2edb3b899310dc2553324fddb28036050ef9f7fe
.exe windows:4 windows x86

9c869678a99278be2d0376c7e077cd8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
GetLastError
CreateProcessA
OpenProcess
Sleep
GetTempPathA
RemoveDirectoryA
DeleteFileA
ReleaseMutex
CreateMutexA
GetModuleFileNameA
GetPrivateProfileStringA
GetCurrentProcessId
CopyFileA
GetModuleHandleA
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
IsBadWritePtr
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
HeapReAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
LCMapStringW
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

ShowWindow
FindWindowA
SendMessageA
KillTimer
EndDialog
DialogBoxParamA
SetTimer
SystemParametersInfoA
GetWindowRect
SetWindowPos
AnimateWindow

shell32

ShellExecuteA
SHFileOperationA

wininet

DeleteUrlCacheEntry

shlwapi

SHGetValueA
PathFileExistsA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9c869678a99278be2d0376c7e077cd8d

Headers

File Characteristics

Imports

kernel32

user32

shell32

wininet

shlwapi

version

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 4KB