188f8ca0c51f93ba0487b207ff082c67

General

Target

188f8ca0c51f93ba0487b207ff082c67
Size

156KB
MD5

188f8ca0c51f93ba0487b207ff082c67
SHA1

c2e5831de7466e7b7e2b9335c9089262a5fb23d5
SHA256

59e3f9024488cad9ac0c8298e1f01c26697330ca6ee78a34b48d1ee595894874
SHA512

85f66ead17a56f2bce8e28a58e8bbf5dd4981937f381b3a338fb41f0ef73ca956ede463734019756e5a9a1eae32674c50540807ec1ec4ddec620f232560d14be
SSDEEP

3072:YSrfr0nWLtkH3RrA+2dYhG4ZNgxrFtBdKyo5vTBmqQL06ynm/jxea+l4K:JDr0nWLth+2dgG4ZNer/BQJ5vTBmPg6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
188f8ca0c51f93ba0487b207ff082c67

Files

188f8ca0c51f93ba0487b207ff082c67
.exe windows:4 windows x86 arch:x86

a277b4f90d6ab9b26de5a17478fe68fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FlashWindow
GetActiveWindow
wsprintfA

msvcrt

srand
memmove
__CxxFrameHandler
rand
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_ftol
memset
_except_handler3
strncmp
malloc
tolower
_itoa

shlwapi

SHDeleteKeyA
SHCopyKeyA
SHGetValueA
PathFileExistsA

kernel32

SetFileAttributesA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
IsBadWritePtr
GetModuleFileNameA
GetCurrentThreadId
GetCommandLineA
CopyFileA
GetStartupInfoA
CreateProcessA
SetUnhandledExceptionFilter
CreateThread
GetExitCodeThread
GetTickCount
ExitThread
IsBadReadPtr
SleepEx
SetEnvironmentVariableA
ExpandEnvironmentStringsA
CreateEventA
WaitForSingleObject
CreateFileA
SetFilePointer
WriteFile
GetTempPathA
GetCurrentDirectoryA
LoadLibraryA
ExitProcess
Sleep
GetCurrentProcess
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
GetLastError
CreateDirectoryA
DeleteFileA
GetFileAttributesA
GetSystemDirectoryA
GetModuleHandleA
GetProcAddress

ws2_32

closesocket
getprotobynumber

Sections

CODE
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a277b4f90d6ab9b26de5a17478fe68fe

Headers

File Characteristics

Imports

user32

msvcrt

shlwapi

kernel32

ws2_32

Sections

CODE Size: 20KB - Virtual size: 18KB

.data Size: 164KB - Virtual size: 166KB

.rsrc Size: 4KB - Virtual size: 3KB

CODE
Size: 20KB - Virtual size: 18KB

.data
Size: 164KB - Virtual size: 166KB

.rsrc
Size: 4KB - Virtual size: 3KB