35bb4b27d794af9134a281ca15d5be76

General

Target

35bb4b27d794af9134a281ca15d5be76
Size

84KB
MD5

35bb4b27d794af9134a281ca15d5be76
SHA1

e7f30c4ac300cce2e2bdf8fe27c968b0897a193f
SHA256

c03f7791eb081f9eb3603fed52bdd9517e93dd209d45392905f6a782bfef866b
SHA512

574d7f93c4abb7044be3d61d575700d89045f0c274eedc94649a7f7e26b0558b0c74d4b1d2d62a9be17feecdf421c025c0600c81b3559a4b062f1ba3580309e9
SSDEEP

1536:hQ0Ui1UvAXpUqd3x+oD2mjTI+ioR91nJ7B9ajjN:hQ0UgUvAXpUqd3x1DVPI+n1fMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35bb4b27d794af9134a281ca15d5be76

Files

35bb4b27d794af9134a281ca15d5be76
.exe windows:4 windows x86 arch:x86

1c0da5187e70375d261928ab1011ca70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_BeginDrag
ImageList_DrawIndirect
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_Copy
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Read
ImageList_LoadImage
ImageList_AddIcon
ImageList_EndDrag
ImageList_GetIconSize
ImageList_Merge
ImageList_Replace
ImageList_GetImageRect
ImageList_DragEnter

user32

DialogBoxParamW
AlignRects
DialogBoxParamA
DrawTextW
IsMenu
GetWindowTextA
AppendMenuW
IsWindow
EndDialog
CopyRect
GetWindowTextLengthA
CopyIcon
GetDlgItem
AppendMenuA
GetFocus
CreateIcon
LoadCursorA
LoadMenuA
DrawTextA
GetCursor

advapi32

RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueA
RegReplaceKeyA
RegCreateKeyW
RegOpenKeyW
RegEnumKeyW
RegReplaceKeyW
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegQueryValueExW
RegLoadKeyW
RegQueryValueA
RegOpenKeyExW
RegLoadKeyA
RegOpenKeyExA
RegCreateKeyExA

kernel32

GlobalFree
GetStringTypeA
SetLastError
CloseHandle
HeapFree
lstrlenA
GetModuleFileNameA
Sleep
DeleteFileA
GetLastError
lstrcatA
GetLocalTime
GlobalAlloc
GetFullPathNameA
lstrcmpA
HeapAlloc
GetStdHandle
GetCommandLineA
GetCPInfo
GetModuleHandleA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c0da5187e70375d261928ab1011ca70

Headers

File Characteristics

Imports

comctl32

user32

advapi32

kernel32

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 64KB - Virtual size: 63KB

.rdata Size: 4KB - Virtual size: 99KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 64KB - Virtual size: 63KB

.rdata
Size: 4KB - Virtual size: 99KB

.rsrc
Size: 4KB - Virtual size: 2KB