0055baf839eae0b0efbab0278af210e5

Sharing

Copy URL Twitter E-mail

General

Target

0055baf839eae0b0efbab0278af210e5
Size

188KB
MD5

0055baf839eae0b0efbab0278af210e5
SHA1

2aeaf535367e27acfa72f557e59f3196e0507fa2
SHA256

51c4a71e3c9dee08d54f14b6a88939685aa1bdbfd12b19ce8c2c4fdca2a8658c
SHA512

4b07b36f044ae5e2efb7ee05100294d3b43c9e8bb6499b294aecd3f64a963bd8c3eecc8ed47f3b5c216500f75409dde8f6048d7cbb51df748105117027c32b00
SSDEEP

3072:7LY9ow6BuMOjJAbXyBswvDO47pDpZGy7+2x+gWZR52k2jZ+zBQa+re:70uYjSbXyRDpDpgL2gZmVjZiBdSe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0055baf839eae0b0efbab0278af210e5

Files

0055baf839eae0b0efbab0278af210e5
.exe windows:4 windows x86 arch:x86

3c85a0c3fdf7a81246936e519d9f9189

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumChildWindows
GetDlgItem
FindWindowA

ole32

CoGetObject
CoFreeAllLibraries
CoFreeUnusedLibraries
CoFileTimeNow

oleaut32

CreateTypeLi

kernel32

SetLastError
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
VirtualProtectEx
CreateSemaphoreA
GetModuleHandleA
GetProcAddress
ExitProcess
GetLastError
RemoveDirectoryA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hzeghm
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tqi
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c85a0c3fdf7a81246936e519d9f9189

Headers

File Characteristics

Imports

user32

ole32

oleaut32

kernel32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 91KB

hzeghm Size: 289KB - Virtual size: 288KB

tqi Size: 109KB - Virtual size: 109KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 91KB

hzeghm
Size: 289KB - Virtual size: 288KB

tqi
Size: 109KB - Virtual size: 109KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 3KB - Virtual size: 2KB