56d731581ad8f4493c8cecb7f5e04c0d

Sharing

Copy URL

Twitter E-mail

General

Target

56d731581ad8f4493c8cecb7f5e04c0d
Size

686KB
MD5

56d731581ad8f4493c8cecb7f5e04c0d
SHA1

6fb0f04765790b62f55b20e360a310e2c99ba032
SHA256

7956401d613a60331ebf7d097db9c6cf017e404e40a78eabd639108c26b28b0f
SHA512

5bb5f9d06ac94773ec855e461b6ce8f2732e7d5da1a53d0f1c4f506da8fe39f3ff5fde1013b5c61bc33dd9b455697355bdbe2c25b80b60a43c1973478adc5cfd
SSDEEP

12288:NmeJkK0HyLYJbccQPelQ5J49aLV+e2NoY/c4k18M9eKYh78oBvfcOL1:NmMRecFmlQ5BR+e2NlpkY1nco1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56d731581ad8f4493c8cecb7f5e04c0d

Files

56d731581ad8f4493c8cecb7f5e04c0d
.exe windows:4 windows x86 arch:x86

e2968e40886d298809885cf08ebab8a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
ReadFile
ExitProcess
GetCommandLineA
GetModuleFileNameA
WriteFile
SetFilePointer
CopyFileA
GetTempFileNameA
SetFileAttributesA
GetTempPathA
CreateFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
Sleep
CreateThread
CreateProcessA
RemoveDirectoryA
GlobalFree
GlobalAlloc
CloseHandle
DeleteFileA
CreateDirectoryA
WaitForSingleObject
GetSystemDirectoryA
GetModuleHandleA
MultiByteToWideChar
GetDiskFreeSpaceA

user32

GetDlgItemTextA
LoadBitmapA
SendDlgItemMessageA
IsDlgButtonChecked
GetParent
SetDlgItemTextA
LoadIconA
SetClassLongA
DestroyWindow
CreateDialogParamA
SetWindowTextA
EndDialog
GetAsyncKeyState
GetWindowRect
ScreenToClient
EnableWindow
GetDesktopWindow
MessageBoxA
ShowWindow
InvalidateRect
UpdateWindow
PeekMessageA
DispatchMessageA
FindWindowA
SendMessageA
GetDlgItem
wsprintfA
DialogBoxParamA
SetWindowPos

gdi32

TextOutA
SetBkColor
SetTextColor
GetStockObject
DeleteObject
SelectObject
BitBlt
CreateCompatibleDC
GetNearestColor
GetTextMetricsA

advapi32

RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

ole32

OleInitialize
CoCreateInstance
CoInitialize
OleUninitialize

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2968e40886d298809885cf08ebab8a2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 9KB - Virtual size: 13KB

.rsrc Size: 649KB - Virtual size: 649KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 9KB - Virtual size: 13KB

.rsrc
Size: 649KB - Virtual size: 649KB