442e387a3dcd06d75ebcab2fb4b00a79

Sharing

Copy URL Twitter E-mail

General

Target

442e387a3dcd06d75ebcab2fb4b00a79
Size

183KB
MD5

442e387a3dcd06d75ebcab2fb4b00a79
SHA1

5fca0efcb0894052c8132520a93350773b9a1991
SHA256

e71b2e06a6257b6717c10ea9b32ac0558035151cd0719d43f6d64fb18bbc505d
SHA512

d20e9768e900450a1db6b2448e751a4ed652ea71eeffca82af2695d2d41593ff955d518314a16416c7b70e984014c68ab50dd0bab1f7f517c88b847096d02e06
SSDEEP

3072:ej/j2UdMHc/hgLsmxs9NlSpQT1ljph1VdFC7DM/0Xuqg3RlIF5Xd5:ej/j52GV2a5hO7k0Xxg3f+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442e387a3dcd06d75ebcab2fb4b00a79

Files

442e387a3dcd06d75ebcab2fb4b00a79
.exe windows:4 windows x86 arch:x86

e618350e451c44aa00d642d611a8b214

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoCreateGuid
CoGetMalloc
CoTaskMemAlloc
OleRun
CoCreateInstance
GetHGlobalFromStream
RegisterDragDrop
OleGetAutoConvert
ProgIDFromCLSID
OleDuplicateData
StgOpenStorageOnILockBytes
CLSIDFromString
CoFreeUnusedLibraries
ReleaseStgMedium
RevokeDragDrop
CLSIDFromProgID
CoGetClassObject
StringFromCLSID
OleRegGetUserType
GetHGlobalFromILockBytes
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal

comdlg32

GetFileTitleA

user32

ChildWindowFromPoint
SetClipboardData
EmptyClipboard
MonitorFromWindow
DrawEdge
GetSysColorBrush
ToAscii
RegisterClassW
ClipCursor
SetScrollRange
SetWindowsHookExW
CallNextHookEx
DefWindowProcW
DestroyCursor
DestroyIcon
WinHelpW
SetWindowPos
IsClipboardFormatAvailable
UnhookWindowsHookEx
GetSysColor

rpcrt4

RpcBindingFromStringBindingA
RpcStringBindingComposeA
RpcBindingSetAuthInfoA
NdrClientCall
RpcStringFreeA

shlwapi

PathStripToRootW
PathIsURLW
PathIsRootW
PathIsRelativeW
PathCanonicalizeW
PathCombineW

kernel32

LocalAlloc
CreateFiberEx
GetSystemTime
VerLanguageNameW
FindResourceExA
SetCommConfig
FileTimeToLocalFileTime
SearchPathW
GetFileType
UnlockFile
GetVolumeInformationW
LockFile
EnumResourceNamesW
IsDBCSLeadByte
GetProfileStringW
FlushFileBuffers
GetFileTime
GetUserDefaultLangID
GetFileAttributesA
GetVersionExW
CompareStringW
FileTimeToSystemTime
SetEndOfFile
FlushFileBuffers
GetSystemDirectoryW

gdi32

ExtCreatePen
CreatePen
PolyBezier
SetTextColor
StrokePath
FlattenPath
PlgBlt
GetBitmapBits
AnimatePalette
SetStretchBltMode
CreateFontIndirectA
GetBkColor
RoundRect
GetPath
SetDIBits

comctl32

ImageList_GetIconSize
ImageList_DrawEx
ImageList_Create
ImageList_Add
ImageList_Destroy

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e618350e451c44aa00d642d611a8b214

Headers

File Characteristics

Imports

ole32

comdlg32

user32

rpcrt4

shlwapi

kernel32

gdi32

comctl32

Sections

.text Size: 155KB - Virtual size: 155KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 23KB - Virtual size: 22KB

.lib Size: 512B - Virtual size: 80KB

.text
Size: 155KB - Virtual size: 155KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 23KB - Virtual size: 22KB

.lib
Size: 512B - Virtual size: 80KB