11261841553360dd50cda20f7891cbbf

Sharing

Copy URL

Twitter E-mail

General

Target

11261841553360dd50cda20f7891cbbf
Size

115KB
MD5

11261841553360dd50cda20f7891cbbf
SHA1

782b6fac8c5184b37a40e0f990b2729ffc747bc2
SHA256

02554da68c3781debd9d06ea243a2161adcfc7a0841ed9d71964a7958a591ced
SHA512

2ae6c87af994bf8e1748437ebd457e434c3f9c1fb4b53406060edc3fa4bdd8be01c9a76ad0aa500ee8edca7b3346572f9fa50f5e1d86b5021332abc5ad5d9b2f
SSDEEP

3072:YmpEp9xUWu1gGjXr2vwvEbMps2i/XHCoD:YmpPTj7QIpsPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11261841553360dd50cda20f7891cbbf

Files

11261841553360dd50cda20f7891cbbf
.exe windows:4 windows x86 arch:x86

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetFileTitleA
GetSaveFileNameA

version

GetFileVersionInfoSizeA
VerFindFileA

kernel32

GetStringTypeW
ExitThread
SetEvent
GetModuleFileNameA
GetProcAddress
GetStdHandle
lstrcpyA
GlobalDeleteAtom
GetCurrentThreadId
VirtualAllocEx
SizeofResource
DeleteCriticalSection
GetModuleHandleA
GetUserDefaultLCID

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Destroy
ImageList_Read
ImageList_Draw

ole32

CoRevokeClassObject
CoGetMalloc
CoUnmarshalInterface
CreateOleAdviseHolder

gdi32

LineTo
SetBkColor
GetDIBColorTable
CreateBitmap
GetDIBits
CopyEnhMetaFileA
CreatePenIndirect
GetPixel
CreatePalette
GetPaletteEntries

advapi32

RegQueryInfoKeyA
RegLoadKeyA
RegQueryValueExA

user32

DrawIconEx
SetScrollRange
SetCapture
EndPaint
ClientToScreen
EnableWindow
GetWindowPlacement
AdjustWindowRectEx
PostQuitMessage
KillTimer
DestroyWindow
OffsetRect
GetMessagePos
GetKeyboardLayoutList
GetTopWindow
EnumThreadWindows
GetSubMenu
DispatchMessageW
GetKeyboardState
SetPropA
CloseClipboard
RemovePropA
LoadCursorA
MapVirtualKeyA
MsgWaitForMultipleObjects
GetCursor
LoadIconA

oleaut32

SafeArrayCreate
SysStringLen
SafeArrayPtrOfIndex
VariantCopyInd
VariantChangeType
SysFreeString
SafeArrayGetElement
SafeArrayGetUBound
SysAllocStringLen
RegisterTypeLib

shell32

SHGetFolderPathA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation
SHFileOperationA

shlwapi

PathIsContentTypeA
SHGetValueA
SHQueryValueExA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34189d522d9c31eeba7932abd1253947

Headers

File Characteristics

Imports

comdlg32

version

kernel32

comctl32

ole32

gdi32

advapi32

user32

oleaut32

shell32

shlwapi

Sections

.text Size: 28KB - Virtual size: 27KB

.edata Size: 512B - Virtual size: 500B

BSS Size: 82KB - Virtual size: 81KB

DATA Size: 1KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.edata
Size: 512B - Virtual size: 500B

BSS
Size: 82KB - Virtual size: 81KB

DATA
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB