113605c4b8d87b8846355c5e2ef34b0e

Sharing

Copy URL Twitter E-mail

General

Target

113605c4b8d87b8846355c5e2ef34b0e
Size

103KB
MD5

113605c4b8d87b8846355c5e2ef34b0e
SHA1

88cb1e00c0885d63dd933fa7ae4f4acf69b38638
SHA256

3e3c6ffae4e82660a435f3d4fd9da5c90cd66802de14520e0d5d5388efb73f05
SHA512

cdfa0291599dbc95d90be87f2c1553d67cd1543b57916c667388ce90f04c719b99644e092d911f493524a51f682c192f534d123425a3294bab0c54ce809a2fe3
SSDEEP

3072:TZyIDJPKNcHLiK8/i+m6GHTD4WMSgQxZ1Xad:Fy0JSK8/+60ssw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
113605c4b8d87b8846355c5e2ef34b0e

Files

113605c4b8d87b8846355c5e2ef34b0e
.exe windows:4 windows x86 arch:x86

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantChangeType
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SafeArrayUnaccessData
SysReAllocStringLen
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SafeArrayUnaccessData

version

GetFileVersionInfoA
VerInstallFileA
GetFileVersionInfoSizeA
VerFindFileA
GetFileVersionInfoA
VerInstallFileA

gdi32

CopyEnhMetaFileA
CreateCompatibleDC
CreateDIBSection
GetDCOrgEx

user32

GetCursorPos
GetCursor
IsWindowEnabled
GetCapture
GetScrollInfo
IntersectRect
AdjustWindowRectEx
SetWindowTextA
UnhookWindowsHookEx
LoadKeyboardLayoutA
GetMenuItemInfoA
GetMessagePos
OemToCharA

comctl32

ImageList_DrawEx
ImageList_Write
ImageList_Read
ImageList_Remove
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_DragShowNolock
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_DragShowNolock
ImageList_Remove
ImageList_Write
ImageList_Create

shell32

SHGetDiskFreeSpaceA
SHGetFileInfoA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryFileA
SHGetFileInfoA
Shell_NotifyIconA

ole32

GetHGlobalFromStream
OleRun
StgCreateDocfileOnILockBytes
MkParseDisplayName
CoReleaseMarshalData
CoCreateGuid
CoUnmarshalInterface

shlwapi

SHDeleteValueA
SHDeleteKeyA
SHGetValueA
SHQueryValueExA

kernel32

ExitThread
GetModuleHandleA
GetACP
GetProcAddress
GetLastError
VirtualAlloc
Sleep
ResetEvent
GlobalAddAtomA
HeapFree
CloseHandle
GetStdHandle

advapi32

RegEnumValueA
RegDeleteKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
FindTextA
GetFileTitleA
ChooseColorA

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 575B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d1f20fe365c7fa18c0bbfeae1567ca6

Headers

File Characteristics

Imports

oleaut32

version

gdi32

user32

comctl32

shell32

ole32

shlwapi

kernel32

advapi32

comdlg32

Sections

.text Size: 29KB - Virtual size: 28KB

DATA Size: 1024B - Virtual size: 575B

.edata Size: 70KB - Virtual size: 70KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

DATA
Size: 1024B - Virtual size: 575B

.edata
Size: 70KB - Virtual size: 70KB

.rdata
Size: 1KB - Virtual size: 1KB