b2521bd7bd488c265249c413fc177d6cbba6e26bee0e5127a23a39d262923bc9

General

Target

b2521bd7bd488c265249c413fc177d6cbba6e26bee0e5127a23a39d262923bc9
Size

1.4MB
MD5

fca7e0a01128291fa7fb36db68d2979d
SHA1

7aa5c155d1f86643fdb1e3d28e5f7dba4de10ee0
SHA256

b2521bd7bd488c265249c413fc177d6cbba6e26bee0e5127a23a39d262923bc9
SHA512

3cdb41a3f0d1d9b527953a241242b02b679a45ac24d7c51433b9ce0ba4b313a57724df85f38312b3303aa26cbd273fb277372459ecd6df90f86fbdd00a6894b6
SSDEEP

24576:Cv14fKi10YQfZ1aKFnO2sG/GmOeiQdY7i97ybuyVkbvDmMnkmEU517gmd2/7:qiftu2iOatB9m7i97OuEeDZknUz7gD/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2521bd7bd488c265249c413fc177d6cbba6e26bee0e5127a23a39d262923bc9

Files

b2521bd7bd488c265249c413fc177d6cbba6e26bee0e5127a23a39d262923bc9
.exe windows:5 windows x86 arch:x86

af6ecafd75299a9f8807507b3938a1aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CreateFileA
RtlUnwind
GetProcAddress
LCMapStringA

user32

SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegDeleteValueA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA

ole32

CoMarshalInterface
CoCreateInstanceEx
CoCreateInstance

Sections

.text
Size: 1.1MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 118KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af6ecafd75299a9f8807507b3938a1aa

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 1.1MB - Virtual size: 2.4MB

.rdata Size: 191KB - Virtual size: 481KB

.data Size: 83KB - Virtual size: 460KB

.data1 Size: 512B - Virtual size: 2KB

.rsrc Size: 45KB - Virtual size: 44KB

.reloc Size: - Virtual size: 118KB

.adata Size: 68KB - Virtual size: 114KB

.text
Size: 1.1MB - Virtual size: 2.4MB

.rdata
Size: 191KB - Virtual size: 481KB

.data
Size: 83KB - Virtual size: 460KB

.data1
Size: 512B - Virtual size: 2KB

.rsrc
Size: 45KB - Virtual size: 44KB

.reloc
Size: - Virtual size: 118KB

.adata
Size: 68KB - Virtual size: 114KB