05c6e6ba5fa60cd06b4ae0fa6236dc09

Sharing

Copy URL

Twitter E-mail

General

Target

05c6e6ba5fa60cd06b4ae0fa6236dc09
Size

153KB
MD5

05c6e6ba5fa60cd06b4ae0fa6236dc09
SHA1

8d248a16f173825329d1b1f1b04860b41562687b
SHA256

e70554a5be4af4af4c13ac28132de4c6670819fff3ccff628833b0230bcd17fb
SHA512

c1c26a06eeb6a2433633f9f68c7081e383d2b38b9928d241320da11855419564c48e1a6af7c54e08f32f33e05a124aa7d5b28e8784f44b4244b3cd10ab336561
SSDEEP

3072:dunSRkNtpBneWxQpreF9EhQoaYovGgJ+oCRWh1:2tBnyZeF9ipabfn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05c6e6ba5fa60cd06b4ae0fa6236dc09

Files

05c6e6ba5fa60cd06b4ae0fa6236dc09
.exe windows:4 windows x86 arch:x86

59754154aab4e48f9b284aa8274c1246

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetFilePointer
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetLastError
TlsAlloc
TlsSetValue
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
VirtualFree
HeapCreate
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
HeapReAlloc
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileIntA
WritePrivateProfileStringA
FormatMessageA
LocalFree
GetTempPathA
RemoveDirectoryA
Sleep
OutputDebugStringA
DebugBreak
ExitProcess
FreeLibrary
GetComputerNameA
CreateThread
GetShortPathNameA
MoveFileA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetSystemDirectoryA
SetThreadLocale
ReleaseMutex
CreateMutexA
GetLastError
DeleteFileA
MoveFileExA
WriteFile
ReadFile
CloseHandle
CreateFileA
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
LoadLibraryA
lstrcpynA
GetModuleHandleA
GetProcAddress
GetVersionExA
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultLangID
lstrcpyA
lstrcatA
TlsGetValue
lstrlenA

user32

IsDlgButtonChecked
PostQuitMessage
SetPropA
SetCursor
GetPropA
RemovePropA
GetMenu
AdjustWindowRectEx
SetWindowPos
ClientToScreen
GetDlgItemTextA
GetParent
GetCapture
IsWindowEnabled
DrawEdge
DrawFocusRect
MapWindowPoints
GetWindow
EnableWindow
LoadStringA
GetSystemMetrics
GetWindowRect
SetDlgItemTextA
wvsprintfA
CharNextA
SendMessageTimeoutA
FindWindowA
GetDlgCtrlID
CreateDialogParamA
InvalidateRect
DestroyWindow
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
EnumWindows
MessageBoxA
IsDialogMessageA
GetDlgItem
SendMessageA
FillRect
FrameRect
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
ReleaseDC
EndPaint
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ReleaseCapture
SetCapture
PtInRect
GetDC
InflateRect
BeginPaint
ShowWindow
PostMessageA
MoveWindow
SetWindowRgn
ScreenToClient
SetRectEmpty
GetClientRect
DrawFrameControl
GetWindowTextA
DrawTextA
IsRectEmpty
CopyRect
KillTimer
LoadImageA
GetWindowDC
DrawIconEx
SetWindowTextA
GetCursorPos
SetTimer
UpdateWindow
DefWindowProcA
IsWindow
OffsetRect
SystemParametersInfoA
CheckDlgButton

gdi32

CreatePolygonRgn
SetViewportOrgEx
GetViewportOrgEx
SetPixelV
CreateRoundRectRgn
OffsetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
CreateRectRgn
CombineRgn
EqualRgn
GetClipBox
DeleteObject
CreateFontIndirectA
GetObjectA
GetStockObject
DeleteDC
StretchBlt
SetStretchBltMode
ExtTextOutA
SetBkColor
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetTextColor
SetBkMode
FrameRgn
OffsetRgn
CreateSolidBrush
ExcludeClipRect
Polygon
BitBlt
SetWindowOrgEx

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExA
FreeSid
RegCloseKey

shell32

StrStrIA
ShellExecuteA

ole32

OleUninitialize
CoInitialize
CoUninitialize
OleInitialize

oleaut32

OleTranslateColor

shlwapi

SHGetValueA
SHSetValueA
PathFileExistsA
SHDeleteKeyA

comctl32

ImageList_Destroy
ImageList_AddMasked
ImageList_Create
ImageList_Draw
ImageList_SetBkColor
ImageList_GetIconSize
InitCommonControlsEx
_TrackMouseEvent
ImageList_LoadImageA

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

59754154aab4e48f9b284aa8274c1246

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 36KB - Virtual size: 40KB

.rsrc Size: 28KB - Virtual size: 26KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 36KB - Virtual size: 40KB

.rsrc
Size: 28KB - Virtual size: 26KB