021ec3cd8845acaaf6b408d8d0e074bb

Sharing

Copy URL Twitter E-mail

General

Target

021ec3cd8845acaaf6b408d8d0e074bb
Size

95KB
MD5

021ec3cd8845acaaf6b408d8d0e074bb
SHA1

a1c5fe7eadf58bcad456abec99f81a7885490a73
SHA256

2169cdfdbe028b4b2a4c87e253845eb5f18677c98fdbb32393a8267e7d21b2c0
SHA512

e4a70b6ce59f93aafe08063f54b4b5f55f518734cf87d3ee3b416274f6ad7ed0a9f7652d2e12b2c159e742dd09169d90d078891b890f1874761c4d9bc6d231d0
SSDEEP

1536:WaKwCE2RI/WJa6AnVF+3n5QEFIq+KaczHzOIFqXZL70DcRMDGG0:W/VE2S96CVF+X5QMeKaMHtFqh0oRMDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
021ec3cd8845acaaf6b408d8d0e074bb

Files

021ec3cd8845acaaf6b408d8d0e074bb
.exe windows:4 windows x86 arch:x86

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerInstallFileA

kernel32

GetCurrentProcess
lstrlenA
VirtualAllocEx
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
GetVersionExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

user32

GetActiveWindow

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder

shlwapi

SHQueryValueExA

gdi32

GetDIBColorTable
SetBkColor
SetPixel
CreateCompatibleDC
CreatePenIndirect
SelectPalette

msvcrt

tan
memcpy
calloc

advapi32

RegCreateKeyExA
GetLengthSid
RegDeleteValueA
RegLoadKeyA

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_Remove
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Add

ole32

OleRun
CoRegisterClassObject
CoRevokeClassObject
StringFromIID
StgOpenStorage
CoCreateGuid
GetHGlobalFromStream

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
SysReAllocStringLen
SysFreeString

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

Imports

version

kernel32

comdlg32

user32

shell32

shlwapi

gdi32

msvcrt

advapi32

comctl32

ole32

oleaut32

Sections

CODE Size: 43KB - Virtual size: 42KB

.rdata Size: 45KB - Virtual size: 45KB

DATA Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 43KB - Virtual size: 42KB

.rdata
Size: 45KB - Virtual size: 45KB

DATA
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB