1656e2ae533f8f6dd5549a3150370fac07a5cb553eb7cdd70fae224b97eff763

General

Target

1656e2ae533f8f6dd5549a3150370fac07a5cb553eb7cdd70fae224b97eff763
Size

63KB
MD5

70cd6a0c85f392cfa61016595a86935a
SHA1

46528a6a7e4e7ccc92602f34e2fdbd991c528f1e
SHA256

1656e2ae533f8f6dd5549a3150370fac07a5cb553eb7cdd70fae224b97eff763
SHA512

c041dd562f0fc5168005c7896754d1674a0a83e99940fdc6e9bfb5da1a4332b8e38958858dcb086fb4768dc734c275bb1205f07be4d11eb2af2f918a62646f45
SSDEEP

1536:OEkaLmj7amXtk5uLg00NiduzOL64xT1AlvPX7:hutep4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1656e2ae533f8f6dd5549a3150370fac07a5cb553eb7cdd70fae224b97eff763

Files

1656e2ae533f8f6dd5549a3150370fac07a5cb553eb7cdd70fae224b97eff763
.exe windows:6 windows x86 arch:x86

8f833605e0dbb36eb69e6004e8b02b41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfo

kernel32

LocalSize
lstrcpyn
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
RtlMoveMemory
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
IsBadReadPtr

user32

CreateIconFromResource
GetClassInfoExW
DefFrameProcW
EndDialog
CreateWindowExW
DefMDIChildProcW
MessageBoxA
wsprintfA

comctl32

ImageList_Add
ImageList_Create
ImageList_AddMasked

msvcrt

free
strchr
malloc
sprintf
_ftol
??3@YAXPAX@Z
strstr
??2@YAPAXI@Z
atoi

ole32

CoInitialize
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantInit
VariantTimeToSystemTime
SafeArrayGetElemsize
OleLoadPicture
VariantChangeType
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
VariantCopy

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f833605e0dbb36eb69e6004e8b02b41

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

comctl32

msvcrt

ole32

oleaut32

Sections

.text Size: 40KB - Virtual size: 40KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 17KB - Virtual size: 65KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 40KB - Virtual size: 40KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 17KB - Virtual size: 65KB

.reloc
Size: 2KB - Virtual size: 1KB