079eebe4d0d99fe62fc8554baf5d5443

General

Target

079eebe4d0d99fe62fc8554baf5d5443
Size

118KB
MD5

079eebe4d0d99fe62fc8554baf5d5443
SHA1

6fb45c9683f53bcb8102bc522d843258c68ea71d
SHA256

66b13b0fed13f5f9773d95d764be1f9072391a3c71d789cf2fb438920566ffcf
SHA512

6777595f208a1432ba8f8df285f92c853b006b147868ace407f3767cd18d34faacdea3fba3c71869a388b1b8bee451adff6aa6f0df3fd04968c43c59c4f78111
SSDEEP

1536:ONs2UxNbNQSITk5JC7dbTi5aNGcfUNSTIEkA4BKQpNNA4WHo/bpTpf6g1UReIK2Z:nxNaSIaJC7A5ExHk/YHYFTH6LoS0y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079eebe4d0d99fe62fc8554baf5d5443

Files

079eebe4d0d99fe62fc8554baf5d5443
.exe windows:4 windows x86 arch:x86

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegEnumKeyA
RegQueryValueW
RegEnumValueW
RegReplaceKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteKeyW
RegDeleteKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegQueryValueExW
RegReplaceKeyA
RegLoadKeyW
RegEnumValueA

comctl32

InitCommonControls
ImageList_GetDragImage
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
ImageList_LoadImage
ImageList_Draw
ImageList_GetIcon
ImageList_Read
ImageList_LoadImageA
ImageList_Merge
ImageList_DrawEx
ImageList_GetImageCount
ImageList_DragLeave

user32

DialogBoxParamW
GetDC
LoadCursorA
CalcMenuBar
AppendMenuW
EndDialog
GetDlgItem
CloseWindow
DrawIcon
GetCursor
CopyRect
IsWindow
BlockInput
CreateIcon
GetMenu
DrawTextA
AlignRects

kernel32

CloseHandle
HeapFree
FreeLibrary
WideCharToMultiByte
lstrcatA
GlobalFree
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetFileAttributesA
lstrcpyA
Sleep
GetCPInfo
lstrlenA
GetCommandLineA
GlobalAlloc
lstrcmpA
GetStringTypeW

Sections

.IWnYPN
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.HIvL
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.URaMU
Size: 5KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aeCN
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.XhWjc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.IWnYPN Size: 11KB - Virtual size: 10KB

.HIvL Size: 95KB - Virtual size: 95KB

.URaMU Size: 5KB - Virtual size: 113KB

.aeCN Size: - Virtual size: 1KB

.XhWjc Size: 2KB - Virtual size: 2KB

.IWnYPN
Size: 11KB - Virtual size: 10KB

.HIvL
Size: 95KB - Virtual size: 95KB

.URaMU
Size: 5KB - Virtual size: 113KB

.aeCN
Size: - Virtual size: 1KB

.XhWjc
Size: 2KB - Virtual size: 2KB