f541e92a4ee6f86571a04d03eeeb7d5b

Sharing

Copy URL

Twitter E-mail

General

Target

f541e92a4ee6f86571a04d03eeeb7d5b
Size

288KB
MD5

f541e92a4ee6f86571a04d03eeeb7d5b
SHA1

84b0c8994ef2cdec0bc1d31633cdb50afb4eb824
SHA256

1615ac8c21cce75cb9e66d60151215e368f6b2aef2547feee2bf68f998702eb9
SHA512

31f0369142456fa5f091168aefbcb3994c94dd9e1dcfa78b07f34d5c5340b5b55a8801c25b8ac6ec644674b7e73853a19a749cc363b017aca9b21b6025109373
SSDEEP

6144:wxILdTokcUhDTuDchi3Pc/t4Jnn2lTPCbmNsdOod:l5czghif2O2lTPWOsdOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

f541e92a4ee6f86571a04d03eeeb7d5b

resource
f541e92a4ee6f86571a04d03eeeb7d5b

Files

f541e92a4ee6f86571a04d03eeeb7d5b
.exe windows:4 windows x86 arch:x86

817ca9a493d6171363971d5fae559a97

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringW
SetActiveWindow
CreateWindowExW
GetSubMenu
LoadIconA
CreateWindowExA
TrackPopupMenu
CheckMenuItem
SetWindowTextW
SetCapture
PtInRect
DrawFocusRect
DefWindowProcW

kernel32

GetLocaleInfoW
HeapSize
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetEnvironmentStrings
GetVersionExA
GetCurrentThread
VirtualAlloc
Sleep
GetProcAddress
GetTimeZoneInformation
HeapDestroy
CloseHandle
FindClose
DeleteCriticalSection
GetVersionExW
HeapFree
GetModuleHandleW
RaiseException
SetHandleCount
GetStdHandle
TerminateProcess
LocalFree
ExitProcess
CompareStringA
CompareStringW
GetStringTypeA
LCMapStringW
LoadLibraryA
WideCharToMultiByte
GetCommandLineA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetLastError
GetEnvironmentStringsW
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar

advapi32

RegOpenKeyExW

shlwapi

SHDeleteEmptyKeyW

comdlg32

FindTextW

Sections

.text
Size: 248KB - Virtual size: 245KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

817ca9a493d6171363971d5fae559a97

Headers

File Characteristics

Imports

user32

kernel32

advapi32

shlwapi

comdlg32

Sections

.text Size: 248KB - Virtual size: 245KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 160B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 248KB - Virtual size: 245KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 160B

.reloc
Size: 8KB - Virtual size: 4KB