112548d13a67811a9922404e1a0d9c31

Sharing

Copy URL Twitter E-mail

General

Target

112548d13a67811a9922404e1a0d9c31
Size

80KB
MD5

112548d13a67811a9922404e1a0d9c31
SHA1

3b0297c852d00edb4a066c785f5fa541daf8abd7
SHA256

22c39707a0341f609ff5d35f9a932b347a57a6d79d2d9ca574008ab7f8a003cc
SHA512

82a8ce80f7f85a2bda19869a8eebba471d78ed4aaef94c44f4dde3db04688321136520d6f7d8782177df86e4237de5e5fda8b4d7e1958c05845efa4220a5dfd2
SSDEEP

1536:DOGNLSi8WHa6Q1T5f0hTYy4l1lsHvYXaJX+8WZAxWg0AG5/n1aP:CGN2+5UT0H4lP3lxcG5/nm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
112548d13a67811a9922404e1a0d9c31

Files

112548d13a67811a9922404e1a0d9c31
.exe windows:5 windows x86 arch:x86

a95def43e4fece05c9d60f4a126920e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
strstr
fread
__p__fmode
_initterm
_except_handler3
strchr
_acmdln
strncpy
_exit
_adjust_fdiv
wcslen
calloc
memcpy
malloc
free
_strnicmp
strrchr
__getmainargs
sqrt
__setusermatherr
_stricmp
__set_app_type
__p__commode

kernel32

GetACP
GlobalReAlloc
SetLastError
GetModuleHandleW
GetDiskFreeSpaceA
GetTempPathW
GetCommandLineA
lstrlenW
WriteFile
ExitProcess
ReadFile
SetHandleCount
SetFileTime
FileTimeToSystemTime
GetStartupInfoA
GetSystemInfo
FileTimeToLocalFileTime
FreeLibrary

ole32

CreateItemMoniker
CoGetMalloc
StgOpenStorage
CoFreeUnusedLibraries
ReleaseStgMedium
OleSetClipboard

oleaut32

SafeArrayGetUBound
SetErrorInfo
SysFreeString
SafeArrayRedim
SysAllocStringByteLen
SafeArrayCreate
LoadTypeLib
SysAllocStringLen
VariantCopy
SysStringByteLen

advapi32

RegQueryValueExA
IsValidSid
InitiateSystemShutdownA
RegEnumKeyA
CopySid
LookupPrivilegeValueA
QueryServiceStatus
RegEnumKeyW
InitializeAcl
CryptGenRandom

comctl32

InitCommonControls
ImageList_GetImageInfo
ImageList_Replace
ImageList_Destroy
CreateStatusWindowA
ImageList_Remove
ImageList_Write
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetDragCursorImage
PropertySheetA

gdi32

EnumEnhMetaFile
GetRgnBox
GetEnhMetaFilePaletteEntries
OffsetWindowOrgEx
EndPath
GetNearestPaletteIndex
SetWinMetaFileBits
GetCurrentObject
CreateEnhMetaFileA
SetDIBitsToDevice
EnumFontsA

user32

GetKeyboardType
EqualRect
PtInRect
GetWindow
ShowCursor
GetSysColor
DefWindowProcA
GetWindowLongA
DeleteMenu
GetKeyState
OffsetRect
GetSystemMetrics
SetScrollPos

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a95def43e4fece05c9d60f4a126920e2

Headers

File Characteristics

Imports

msvcrt

kernel32

ole32

oleaut32

advapi32

comctl32

gdi32

user32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 55KB - Virtual size: 54KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 55KB - Virtual size: 54KB

.rsrc
Size: 3KB - Virtual size: 2KB