1376f86a29c24c63a3020473c8ce40d3

Sharing

Copy URL Twitter E-mail

General

Target

1376f86a29c24c63a3020473c8ce40d3
Size

103KB
MD5

1376f86a29c24c63a3020473c8ce40d3
SHA1

2d43a45bf4eb4c54d1427be06a71d667e0461bea
SHA256

0c41d1ccd46b30ec3c65c092557ece12a96cc285baccb2455c60b04ac6c71ae2
SHA512

3427bf562559339b62b5fbf3ff381296c643935bd7638fd2b49a885459121d1910c35a2a188296202aada42065ecdc74426fce5519e8ebe947f825b03c035e11
SSDEEP

1536:CqJW3IBqpAXmqmuyBXSu6omC/w539lGzNP5x2d5sh073Y:dJW38/4EdVGNxxjh0LY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1376f86a29c24c63a3020473c8ce40d3

Files

1376f86a29c24c63a3020473c8ce40d3
.exe windows:4 windows x86 arch:x86

82b892c1560f7376c05585101c514482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHFileOperationA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Destroy
ImageList_GetBkColor
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_DrawEx
ImageList_Add

ole32

CoReleaseMarshalData
CreateBindCtx
StgCreateDocfileOnILockBytes
PropVariantClear
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoRevokeClassObject
OleRegGetUserType
CreateOleAdviseHolder
StgOpenStorage

comdlg32

GetSaveFileNameA
FindTextA
GetOpenFileNameA

kernel32

GetProcAddress
DeleteFileA
GetModuleHandleA
GetACP
GetOEMCP
GetLastError
ExitThread
VirtualAllocEx
GetProcAddress

oleaut32

SysFreeString
OleLoadPicture
SysStringLen
GetErrorInfo
VariantCopyInd
SafeArrayUnaccessData
VariantChangeType
SafeArrayPtrOfIndex
RegisterTypeLib
SafeArrayGetUBound
SafeArrayUnaccessData
OleLoadPicture
SafeArrayCreate
SysStringLen

user32

IsDialogMessageA
FrameRect
GetWindowDC
CharLowerA
GetCursor
IsWindowVisible
MoveWindow
CreateWindowExA
GetFocus
IsChild

gdi32

GetDIBits
RestoreDC
CreatePalette
BitBlt

advapi32

RegCreateKeyExA
RegOpenKeyA

version

VerFindFileA
GetFileVersionInfoSizeA

shlwapi

SHGetValueA

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 523B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82b892c1560f7376c05585101c514482

Headers

File Characteristics

Imports

shell32

comctl32

ole32

comdlg32

kernel32

oleaut32

user32

gdi32

advapi32

version

shlwapi

Sections

CODE Size: 30KB - Virtual size: 29KB

.rdata Size: 1024B - Virtual size: 523B

.tls Size: 69KB - Virtual size: 68KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 30KB - Virtual size: 29KB

.rdata
Size: 1024B - Virtual size: 523B

.tls
Size: 69KB - Virtual size: 68KB

.data
Size: 1KB - Virtual size: 1KB