4061a1017b2b4209e42825ed755d766a

General

Target

4061a1017b2b4209e42825ed755d766a
Size

181KB
MD5

4061a1017b2b4209e42825ed755d766a
SHA1

440545f5f2ae04d31b2e0cd63f0ad853a239a045
SHA256

e1f4b33694a62b48f636954e5847b426c5518d700d02f095d0e79a0abd84fccd
SHA512

2570c5fdb9bd0cac4bf9f79244bcd1138bcef6d4278cb100746ed068f04d990034f04f9cf6f15fe976d433cb6d5074a98c7e71a3f854ae4c1698b34d9759fd4e
SSDEEP

3072:Gxl1HO4NAPPrQv93zKRKtgI0H97iBAdjUYy6N7GaUnzyI5dTjfREoOuQHOOZzo:GbdO4ePPa3zdkH9kAd5N7GhnHtjfREo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4061a1017b2b4209e42825ed755d766a

Files

4061a1017b2b4209e42825ed755d766a
.exe windows:4 windows x86 arch:x86

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LCMapStringW
GetLastError
GetThreadPriority
HeapFree
WideCharToMultiByte
GetCurrentThreadId
WriteConsoleW
SetEndOfFile
LeaveCriticalSection
SetUnhandledExceptionFilter
HeapSize
SetCommConfig
IsValidCodePage
InterlockedIncrement
GetModuleFileNameW
LCMapStringA
EnumSystemLocalesA
GlobalAlloc
GetUserDefaultLCID
EnterCriticalSection
GetLocaleInfoW
RaiseException
GetVersionExA
GetConsoleOutputCP
EnumResourceNamesA
GetCurrentDirectoryW
CloseHandle
DeleteCriticalSection
ReadFile
WriteConsoleA
GetModuleHandleA
InterlockedDecrement
GetFullPathNameW
SetStdHandle
MultiByteToWideChar
ExitProcess
GetProcessHeap
HeapReAlloc
TerminateProcess
GetCommandLineA
UnhandledExceptionFilter
GetCPInfo
InitializeCriticalSection
CreateFileA
WriteFile
RtlUnwind
IsDebuggerPresent
GetProcAddress
GetCurrentProcess
IsValidLocale
HeapAlloc
Sleep
ExitProcess
GetFullPathNameA

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW

user32

GetClassLongA
MessageBoxW

rpcrt4

UuidCreate

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

015cb18c54b874a2e710324a99ec2d84

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

user32

rpcrt4

Sections

.text Size: 150KB - Virtual size: 149KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 27KB - Virtual size: 27KB

.crt Size: 512B - Virtual size: 220KB

.text
Size: 150KB - Virtual size: 149KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 27KB - Virtual size: 27KB

.crt
Size: 512B - Virtual size: 220KB