fde5f9dd09b1705355a32f29c12450b0

General

Target

fde5f9dd09b1705355a32f29c12450b0
Size

148KB
MD5

fde5f9dd09b1705355a32f29c12450b0
SHA1

f3b92e27226415fe842b67087eb30c38fdd3e183
SHA256

3f42a78349e99a33b4d5618882147f8d898afad3855ebb95fdb66a4e2bba4a8d
SHA512

1e0d3f62781ea183b7082ce8ed811d6fd2bf97667e47ffe70576a93bcd7ab0edfbc79b0829fa405a9a966f4109eb0fd2bc93a37d44b0f9f58e80970f38bbcdf5
SSDEEP

3072:JvpRjNdzZNgDCqiljav+ePw6HKqU2OP2i9lmku:JvpdVYil2W6w6qNF2iz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde5f9dd09b1705355a32f29c12450b0

Files

fde5f9dd09b1705355a32f29c12450b0
.exe windows:4 windows x86 arch:x86

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

lstrcatA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
TerminateProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetProcAddress
VirtualAlloc
LoadLibraryA
ReadFile
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetFilePointer
HeapCreate
GetACP
GetOEMCP
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetLastError
RtlUnwind
WriteFile
HeapFree
CloseHandle

oleaut32

SysFreeString

ole32

CoUninitialize
CoInitialize
CoCreateInstance

user32

EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA

comctl32

ord17

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

user32

comctl32

Sections

.text Size: 36KB - Virtual size: 36KB

.data Size: 104KB - Virtual size: 116KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 36KB

.data
Size: 104KB - Virtual size: 116KB

.rsrc
Size: 4KB - Virtual size: 3KB