4099ad3a9577e2523cef22755d7ed4be

General

Target

4099ad3a9577e2523cef22755d7ed4be
Size

198KB
MD5

4099ad3a9577e2523cef22755d7ed4be
SHA1

4cb413a782e025fd810190fcd28de4243e434f46
SHA256

e21530fba3e1cd80fbe138f63d7210074ad7353ba94472705b23800adfece628
SHA512

09fdd29cf09e0843f56c7639e3adfcc558386e543b3545f31a230cc4964d0836cd0de20f3968ca53c61210708de84e273d23db3aa78feda506c1c38d748841e2
SSDEEP

6144:0XCB1H9AYGRD52T+P6aUxlUzwkuJBZZo1:0XCB140T+yV38nuJBZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4099ad3a9577e2523cef22755d7ed4be

Files

4099ad3a9577e2523cef22755d7ed4be
.exe windows:4 windows x86 arch:x86

38f9af5f5ac8603e97f79481a4bf937c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

shlwapi

PathCombineW
PathFileExistsW

user32

DispatchMessageW
CharUpperW
wsprintfW
GetDC
CharNextW
SetTimer
SendMessageA
TranslateMessage
KillTimer
GetMessageW
PostThreadMessageW
UnregisterClassA

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

StringFromGUID2
CoUninitialize
CoRegisterClassObject
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemRealloc
CoInitialize
StringFromCLSID

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegSetValueExW

kernel32

FillConsoleOutputCharacterA
GlobalAlloc
FindClose
GlobalFree
GetTickCount
lstrlenW
GetProcessWorkingSetSize
GetLastError
GetCPInfo
GetACP
lstrcpyW
MultiByteToWideChar
lstrcmpiW
EnumResourceNamesA
CreateFileMappingW
LockResource
OutputDebugStringW
FreeEnvironmentStringsW
InitializeCriticalSection
lstrcpyA
WideCharToMultiByte
GetModuleHandleW

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.isete
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

38f9af5f5ac8603e97f79481a4bf937c

Headers

File Characteristics

Imports

shlwapi

user32

oleacc

ole32

advapi32

kernel32

Sections

.text Size: 123KB - Virtual size: 123KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 70KB - Virtual size: 70KB

.isete Size: 1024B - Virtual size: 88KB

.text
Size: 123KB - Virtual size: 123KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 70KB - Virtual size: 70KB

.isete
Size: 1024B - Virtual size: 88KB