4a702b8bdabdedb0323fd832910e2df6a7e4596e322c8a49a5925936d2e77f8d

Sharing

Copy URL Twitter E-mail

General

Target

4a702b8bdabdedb0323fd832910e2df6a7e4596e322c8a49a5925936d2e77f8d
Size

158KB
MD5

12b510ae9a11b276e40d339e054996ad
SHA1

779dc78e072d6f67572ce320f36442a861513d81
SHA256

4a702b8bdabdedb0323fd832910e2df6a7e4596e322c8a49a5925936d2e77f8d
SHA512

c948bf30a916b00024e175794a59baa1f2b7bca6bcc0f7bfa6a4e9c27b061e9695ba3a7847f4196fe1390ae43f236e09efbc37b903fb66e8a107befa6a7f51de
SSDEEP

3072:ILU1W2i9Yg1iDw7qqjvYGhGjYpNs4Qx9F2luNTLUgZE4q1qC0r2UD0Ug:ILU1W2AH2cY3ksRFguNT4iEwbSUJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a702b8bdabdedb0323fd832910e2df6a7e4596e322c8a49a5925936d2e77f8d

Files

4a702b8bdabdedb0323fd832910e2df6a7e4596e322c8a49a5925936d2e77f8d
.exe windows:6 windows x86 arch:x86

f93fd1cf5a5bd66ff240372c5c2356d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfo

kernel32

LocalSize
lstrcpyn
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleA
IsBadReadPtr
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
SetStdHandle
CloseHandle
DecodePointer
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
SetFilePointerEx
RtlMoveMemory
CreateFileW
WriteConsoleW
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
GetStringTypeW
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount

user32

wsprintfA
CreateIconFromResource
GetClassInfoExW
DefFrameProcW
EndDialog
CreateWindowExW
DefMDIChildProcW
MessageBoxA

comctl32

ImageList_Add
ImageList_Create
ImageList_AddMasked

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitialize

oleaut32

VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
VariantChangeType
VariantCopy
VariantClear
SafeArrayDestroy
SafeArrayCreate
SysAllocString
VariantTimeToSystemTime
OleLoadPicture

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f93fd1cf5a5bd66ff240372c5c2356d1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

comctl32

ole32

oleaut32

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 27KB - Virtual size: 27KB

.data Size: 19KB - Virtual size: 69KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 19KB - Virtual size: 69KB

.reloc
Size: 5KB - Virtual size: 5KB