303771f5ef03849d263ae0794f2cefc1

General

Target

303771f5ef03849d263ae0794f2cefc1
Size

42KB
MD5

303771f5ef03849d263ae0794f2cefc1
SHA1

9954d2915f0ae455d24431ae329b83f8b1db65bb
SHA256

c26b7fbdd1b59cc164b3d4cba1962daa16db339843377280ce28b5c50a635480
SHA512

3b557de141a070108a4f90df2f44059c9cc1d4827d5098fa1ecdb204c9bcb967474c63ff5c998642890109773c3c04aa4dbe8e8561d8cd0eca227e89ff201117
SSDEEP

768:Rz40Q6NGWHw533a5MQLtO7LeB7Ix2uAfLiox613baKQk:a0NGWHw533a5MQxO7LeRiAfLiJaKQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
303771f5ef03849d263ae0794f2cefc1

Files

303771f5ef03849d263ae0794f2cefc1
.exe windows:4 windows x86 arch:x86

f21f46f5ea4a2f92e701efcd9ef2b40a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
UnregisterHotKey
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SetWindowPos
SetWindowLongA
SetTimer
SetRect
SetForegroundWindow
SendMessageA
RegisterHotKey
RegisterClassExA
PostQuitMessage
LoadIconA
LoadCursorA
KillTimer
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetSysColor
GetMessageA
GetForegroundWindow
GetDlgItemTextA
GetClientRect
GetClassNameA
FillRect
EnumWindows
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CallNextHookEx
BeginPaint

kernel32

lstrlenW
lstrlenA
lstrcpyW
lstrcpyA
lstrcmpA
lstrcatW
lstrcatA
WideCharToMultiByte
Sleep
SetFileTime
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetFileTime
GetEnvironmentVariableA
GetCurrentThreadId
GetCommandLineA
ExitProcess
CreateThread
CreateFileW
CloseHandle
CopyFileA

comctl32

InitCommonControls

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA

gdi32

CreateSolidBrush
SelectObject
SetBkMode
SetTextColor
CreateFontIndirectA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f21f46f5ea4a2f92e701efcd9ef2b40a

Headers

File Characteristics

Imports

user32

kernel32

comctl32

advapi32

gdi32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 27KB - Virtual size: 28KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 27KB - Virtual size: 28KB