305a75b4d70d6d97c2765054550ca3dc

Sharing

Copy URL Twitter E-mail

General

Target

305a75b4d70d6d97c2765054550ca3dc
Size

293KB
MD5

305a75b4d70d6d97c2765054550ca3dc
SHA1

79b2444eea610f36fe6968192118b92377b5adba
SHA256

79ed20806271bab35598675fb6b361a1f931cc042698df572ef7facc77cf9814
SHA512

660787763a6916d6bc73134ae8dda14380330c7a3eaefbc5ba1bd05b041facbeee9e9baf143e23c2c8819760f4763039c5e379f016bb24eaeca72233176c4962
SSDEEP

6144:TvQO4itJriqdDE86lrcv2PbVRQ4bwxlc5O3/GKZRo9obvvlM63Ux/sx:0O9vGrcv2PbVRQ4b0l3XZRfbvvlMds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
305a75b4d70d6d97c2765054550ca3dc

Files

305a75b4d70d6d97c2765054550ca3dc
.exe windows:4 windows x86 arch:x86

c8c35614637209a284fdc6c5c06532b6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
DispatchMessageW
TranslateMessage
EndDialog
InvalidateRect
IsWindow
DestroyWindow
SendMessageA
GetWindowLongA
SendMessageW
EnableWindow
LoadStringW
GetClientRect
GetDC
GetWindowRect
GetSystemMetrics
GetDlgItem
ReleaseDC
ShowWindow

ole32

CLIPFORMAT_UserSize
BindMoniker
PropVariantChangeType
CLIPFORMAT_UserFree
CoInitialize

advapi32

SetFileSecurityW
GetLengthSid
RegQueryValueW
GetSecurityDescriptorSacl
RegEnumKeyExA
GetAclInformation
RegCreateKeyW
RegCreateKeyExA
RegOpenKeyExW
RegCloseKey
ControlService
DeleteService
QueryServiceConfigW
GetTokenInformation
CancelOverlappedAccess
OpenProcessToken
RegSetValueExW
RegDeleteValueW
AreAnyAccessesGranted
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExW
RegSetValueExA
RegCreateKeyExW
RegQueryValueExA

ws2_32

WSACleanup
accept
bind
WSALookupServiceNextA
listen
closesocket
socket
WSAStartup

msvcrt

_cgets
_access
_assert
_close
_beep
_c_exit
_cabs
_cgetws
_chdir
_atoldbl
_atoi64

kernel32

SetErrorMode
ExitProcess
FindResourceA
GlobalUnlock
LockResource
BaseDumpAppcompatCache
EnumResourceTypesA
VirtualAlloc
BaseInitAppcompatCacheSupport
GetStartupInfoA
EnumResourceNamesA
GetModuleHandleA

Sections

CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 288KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8c35614637209a284fdc6c5c06532b6

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

advapi32

ws2_32

msvcrt

kernel32

Sections

CODE Size: 1KB - Virtual size: 1KB

DATA Size: - Virtual size: 174B

BSS Size: - Virtual size: 288KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 592B

.rdata Size: - Virtual size: 256B

.rsrc Size: 288KB - Virtual size: 287KB

CODE
Size: 1KB - Virtual size: 1KB

DATA
Size: - Virtual size: 174B

BSS
Size: - Virtual size: 288KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 592B

.rdata
Size: - Virtual size: 256B

.rsrc
Size: 288KB - Virtual size: 287KB