092c37f86ef6a8e15f9f3b86af0a25fb

General

Target

092c37f86ef6a8e15f9f3b86af0a25fb
Size

281KB
MD5

092c37f86ef6a8e15f9f3b86af0a25fb
SHA1

60f4505f4b284379e6950d92db16b31c42fdfca0
SHA256

9b20bd1218c8cd55f155c8d19e59a728b42c2ed1724b93688449137c806ef204
SHA512

f6708649a2b94a5ba99f3f3122de93209fdde9f426c535255fc5faeda71f8e8df62360d73624d597a2899e31c9ccd26fbfa83514d8032cffb2714d4c5cd862c8
SSDEEP

6144:AOTyut8GFzoE3siN7zz+2RHCrf5koa7QTSDE5xu+k/Ilxcr4/:vXzzoE3T3kAQTSI50+kg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
092c37f86ef6a8e15f9f3b86af0a25fb

Files

092c37f86ef6a8e15f9f3b86af0a25fb
.exe windows:1 windows x86 arch:x86

e4757f35ddcbd3b273f947aaaabb25a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
SetTokenInformation

user32

AppendMenuA
BeginPaint
ClipCursor
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ShowCaret
ShowCursor
TrackMouseEvent
TrackPopupMenuEx
UpdateWindow

Sections

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e4757f35ddcbd3b273f947aaaabb25a3

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 82KB - Virtual size: 81KB

.code Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 82KB - Virtual size: 81KB

.code
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB