4651474f85d9a2411ab746edeb4d44bb

General

Target

4651474f85d9a2411ab746edeb4d44bb
Size

16KB
MD5

4651474f85d9a2411ab746edeb4d44bb
SHA1

282e44d3016cb680e42b0f95da5c09149ee7fb8a
SHA256

8e0b1d4884de75b8c3631ddd658a5848398859e06e494e67d182ca6d41e683f4
SHA512

0a0c96230c996ed076fe85c05389e36ae20f026cdd6dfbadf1d15cb0de5bdc5ef2f970017c368e710fa00e57c70882bb0cef957dc2db025b5dfb7fe9edf817fb
SSDEEP

384:vzf4qLVan6D8HIF3YIUa7w9ovlAJpJzuj:T1Vc6D3C+j9AJu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4651474f85d9a2411ab746edeb4d44bb

Files

4651474f85d9a2411ab746edeb4d44bb
.dll windows:4 windows x86 arch:x86

db122a4d990c7be8e93d1984c1048b29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CallWindowProcW
SendMessageW
RegisterClassExW
UpdateWindow
TranslateMessage
ShowWindow
wsprintfA
SetWindowTextA
SetFocus
SendMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
MessageBeep
LoadIconA
LoadCursorA
KillTimer
GetSystemMetrics
GetMessageA
GetDlgItem
EndDialog
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
DdeAccessData
CreateWindowExA

kernel32

lstrlenA
lstrcatA
WriteFile
SystemTimeToFileTime
SleepEx
Sleep
RtlZeroMemory
RtlMoveMemory
ReadFile
OpenMutexA
LoadLibraryExA
LoadLibraryA
HeapCreate
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetCommandLineA
FlushViewOfFile
ExitThread
ExitProcess
DeviceIoControl
CreateFileA
CloseHandle
BeginUpdateResourceA
FreeLibrary

comdlg32

GetOpenFileNameA
GetSaveFileNameA

comctl32

CreateToolbarEx

gdi32

SaveDC
RemoveFontResourceA
GetWindowExtEx
GetStockObject

ws2_32

connect
recv
socket
setsockopt

Exports

Exports

nikixo

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db122a4d990c7be8e93d1984c1048b29

Headers

File Characteristics

Imports

user32

kernel32

comdlg32

comctl32

gdi32

ws2_32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 72KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 72KB

.reloc
Size: 1KB - Virtual size: 1KB