01ae433000be80fe40f314b355ec2f380620a830395e9028df80f9a84def6679

Sharing

Copy URL Twitter E-mail

General

Target

01ae433000be80fe40f314b355ec2f380620a830395e9028df80f9a84def6679
Size

64KB
MD5

67a7b6f86afdd6f84b6471532a05b753
SHA1

83706f2fbcf5ad857ea741cf45ca2376e700f50c
SHA256

01ae433000be80fe40f314b355ec2f380620a830395e9028df80f9a84def6679
SHA512

cb4083bd04b87c2bc36f14550cddc7ba9b0c0dcf7a120ab765b8b7b64686d1b0494efbfcff28d210cb8ca90486c42edaf5136c9dd50c3f3380cef3fa48608d63
SSDEEP

1536:z5R7LuTta/Vtc5Jewg00NCoz+JS18Ukm:GveQq+pm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ae433000be80fe40f314b355ec2f380620a830395e9028df80f9a84def6679

Files

01ae433000be80fe40f314b355ec2f380620a830395e9028df80f9a84def6679
.exe windows:6 windows x86 arch:x86

6f8c0e21e5e9a6aa6f4751063805c019

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfo

kernel32

LocalSize
lstrcpyn
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
MultiByteToWideChar
GetUserDefaultLCID
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
RtlMoveMemory
WideCharToMultiByte
GetStartupInfoA

user32

CreateIconFromResource
wsprintfA
MessageBoxA
DefMDIChildProcW
CreateWindowExW
EndDialog
DefFrameProcW
GetClassInfoExW

comctl32

ImageList_AddMasked
ImageList_Add
ImageList_Create

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_controlfp
atoi
_ftol
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
strchr
free
malloc
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitialize

oleaut32

VariantTimeToSystemTime
VariantInit
SafeArrayGetDim
SafeArrayGetLBound
VariantChangeType
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
OleLoadPicture
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
VariantCopy

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f8c0e21e5e9a6aa6f4751063805c019

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

comctl32

msvcrt

ole32

oleaut32

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 17KB - Virtual size: 65KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 17KB - Virtual size: 65KB

.reloc
Size: 2KB - Virtual size: 1KB