2f450709b812f620877c8c09fc330e82

General

Target

2f450709b812f620877c8c09fc330e82
Size

136KB
MD5

2f450709b812f620877c8c09fc330e82
SHA1

0c3d8f381c09641bdaa873084b9a863a4f24afc8
SHA256

4a72e09c11d49fe946b6d7ada64db7f4f942d2eb3a23a9766e16192820ecb13a
SHA512

84608f012a01cdcc44ba9e67b7d5d04b246da764a59214c1d3df0bc46e593dc0638bca1814c5c35e815c96b02e470333d47ba7b1af020c52367364a6dbd43b00
SSDEEP

3072:JHWTnK/5wl6tJwg/E+ituov0JclYjGBLDq+iOV:J2+/5IYEtlMu2jGBq+iOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f450709b812f620877c8c09fc330e82

Files

2f450709b812f620877c8c09fc330e82
.exe windows:4 windows x86 arch:x86

79fa17429ad3633787fec26712f2c2e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetVolumeLabelW
lstrlenA
GetFileType
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
TransmitCommChar
AddAtomW
lstrcmpiA
ReplaceFileW
RegisterWaitForSingleObject
CreateThread
MapViewOfFileEx
EnumResourceNamesW
lstrcmpiW
IsDBCSLeadByte
PeekNamedPipe
OpenFileMappingW
GetTempPathA
TryEnterCriticalSection
FileTimeToDosDateTime
SetInformationJobObject
LoadLibraryA
CreateProcessA
EndUpdateResourceA
AreFileApisANSI
AddAtomA
SuspendThread
RtlMoveMemory
GetEnvironmentVariableW
GetProcAddress
LocalHandle

ole32

CoCreateGuid
OleDuplicateData
OleCreateStaticFromData
CoLockObjectExternal

user32

VkKeyScanW
CheckRadioButton
DispatchMessageA
ChildWindowFromPoint
GetWindowTextW
SetRectEmpty
FrameRect
AllowSetForegroundWindow
GetThreadDesktop
GetDoubleClickTime
GetLastActivePopup
ShowWindowAsync
SendNotifyMessageW
DefMDIChildProcA
LoadCursorA
NotifyWinEvent
DestroyAcceleratorTable

shlwapi

wnsprintfA

advapi32

InitiateSystemShutdownW
RegSaveKeyW
RegSaveKeyExW
ImpersonateLoggedOnUser
RegEnumValueW
SaferCreateLevel

shell32

ExtractIconA
SHGetSpecialFolderLocation

gdi32

GetBrushOrgEx
CreateHatchBrush
CreateRoundRectRgn
SetMagicColors
GetTextFaceW
AbortPath
PtInRegion
SetRectRgn

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79fa17429ad3633787fec26712f2c2e9

Headers

File Characteristics

Imports

kernel32

ole32

user32

shlwapi

advapi32

shell32

gdi32

Sections

.text Size: 64KB - Virtual size: 62KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 63KB

.text
Size: 64KB - Virtual size: 62KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 63KB