c78929b49514fe573f61793b7733a36d16cd9feb1ad3c9e86da269f242bbf2ae

Sharing

Copy URL Twitter E-mail

General

Target

c78929b49514fe573f61793b7733a36d16cd9feb1ad3c9e86da269f242bbf2ae
Size

84KB
MD5

33510f11aec2aeffd0a29a06c67756ea
SHA1

c1e3083e27a02e6ef5f9e866527e2ad8284a6f1f
SHA256

c78929b49514fe573f61793b7733a36d16cd9feb1ad3c9e86da269f242bbf2ae
SHA512

230db0cea48f891271a13ecdc49fc3aaff5abd88bb8b3bab03bbafe983a240fc575b8fb459e71a201aaaa52aa6c0b570a8d07f42265f367de8910056a3e4d53f
SSDEEP

1536:mrM5/Use/TEIkHflWktokSXAX8TvvX8qV8zBjPD5KRaKf8:n8sKEIYflWioDXAX8TvvX8q+VlKaKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78929b49514fe573f61793b7733a36d16cd9feb1ad3c9e86da269f242bbf2ae

Files

c78929b49514fe573f61793b7733a36d16cd9feb1ad3c9e86da269f242bbf2ae
.exe windows:4 windows x86

7fa66e4c3f6499a0817514dc79c772c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
CreateFileA
CloseHandle
FindResourceA
lstrlenA
lstrcmpiA
GetLastError
LoadResource
CreateMutexA
lstrcpyA
GetDateFormatA
GetStartupInfoA
GetUserDefaultLCID
GetVersionExA
EnumSystemLocalesA
LCMapStringW
LCMapStringA
GetLocaleInfoW
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
IsValidCodePage
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
RtlUnwind
GetModuleHandleA
ReleaseMutex
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCPInfo
HeapAlloc
IsValidLocale
HeapCreate
GetLocaleInfoA
IsBadCodePtr
FreeEnvironmentStringsW
VirtualFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy

user32

DispatchMessageA
TranslateMessage
GetMessageA
CreateWindowExA
SetTimer
RegisterClassExA
GetSubMenu
LoadMenuIndirectA
GetCursorPos
DefWindowProcA
PostMessageA
SetForegroundWindow
TrackPopupMenu
GetForegroundWindow
MessageBoxA
SystemParametersInfoA
wsprintfA
PostQuitMessage
LoadIconA
LoadStringA

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

shell32

Shell_NotifyIconA

u32cfg

ord17

calremi

?CheckReminder@@YAHPAUHWND__@@@Z
?InitRemList@@YAHXZ
?UninitRemList@@YAHXZ

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7fa66e4c3f6499a0817514dc79c772c7

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

u32cfg

calremi

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 8KB - Virtual size: 8KB