392484edf9bac140473d53a766fd9e39

Sharing

Copy URL Twitter E-mail

General

Target

392484edf9bac140473d53a766fd9e39
Size

1.6MB
MD5

392484edf9bac140473d53a766fd9e39
SHA1

d8445a50ae707fa8475fab990d7c9b306ff8b347
SHA256

b796cdd547d6dd690debc075780ea0494201f1570210ebda147a32ea8f8e0f9b
SHA512

0dd9d028b15bfc5ce1d343150242c3a82fc47af8d87a78265e1756fea40a4ec7f4e83bc644906be0f21d7acd43ac9abca567c9f05fcf6423321c6ca93659337d
SSDEEP

49152:NoPD1zcTyyh08GHq/Xi+8+zzbpRYjqlKiDY:NoPpzcTyI08l/Sj+/VOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392484edf9bac140473d53a766fd9e39

Files

392484edf9bac140473d53a766fd9e39
.exe windows:4 windows x86 arch:x86

0327ac228670791ac275067fc355ca6f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

IsDialogMessageA
IsIconic
CharUpperA
CreateMenu
GetSysColorBrush
IsChild
IsDialogMessageW
IsWindowEnabled

version

GetFileVersionInfoSizeA

advapi32

RegEnumValueA

shell32

SHGetFolderPathA
Shell_NotifyIconA
SHGetSpecialFolderLocation

oleaut32

SysAllocStringLen
SafeArrayCreate
SafeArrayGetUBound
OleLoadPicture
RegisterTypeLib
SafeArrayPtrOfIndex

shlwapi

PathIsDirectoryA
PathFileExistsA

comctl32

ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Create
ImageList_Add
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Draw

ole32

CoRevokeClassObject
CoCreateGuid
CreateStreamOnHGlobal
OleRun
CoGetObjectContext
CoGetMalloc
CoGetContextToken
WriteClassStm
MkParseDisplayName

kernel32

GetLastError
GetCommandLineA
GetFileAttributesA
GlobalAlloc
GetLocalTime
GetFileType
GetFileSize
LocalAlloc
VirtualAlloc
GetFullPathNameA

msvcrt

clock
srand
rand
wcscspn
memset
mbstowcs
swprintf
wcsncmp
time

gdi32

RestoreDC
GetTextAlign
CreateFontIndirectA
CreatePalette
CreateBrushIndirect
GetObjectA
GetBitmapBits

Exports

Exports

_ewv@16
oR
2@24
WLU@20
lN
9
_pC
I@12
Q6
eV_
TX7@16
B@12
Yy@24
j@20
P@24
_ckG
4EE@4
m
_eS
_T
i@16
P4q

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

TLS
Size: 2KB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 849B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RES
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0327ac228670791ac275067fc355ca6f

Headers

File Characteristics

Imports

user32

version

advapi32

shell32

oleaut32

shlwapi

comctl32

ole32

kernel32

msvcrt

gdi32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

DATA Size: 1.5MB - Virtual size: 1.5MB

TLS Size: 2KB - Virtual size: 4.5MB

.rdata Size: 1024B - Virtual size: 849B

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 376B

BSS Size: 512B - Virtual size: 33B

.RES Size: 24KB - Virtual size: 24KB

.text
Size: 7KB - Virtual size: 7KB

DATA
Size: 1.5MB - Virtual size: 1.5MB

TLS
Size: 2KB - Virtual size: 4.5MB

.rdata
Size: 1024B - Virtual size: 849B

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 376B

BSS
Size: 512B - Virtual size: 33B

.RES
Size: 24KB - Virtual size: 24KB