5de799363c3f81cb1802c57bfdef826d

General

Target

5de799363c3f81cb1802c57bfdef826d
Size

280KB
MD5

5de799363c3f81cb1802c57bfdef826d
SHA1

7601a08bda60281a84f64ad9e1f45aa766485dd4
SHA256

e4c36c80b6756ffd948aa866b2fb4ee11cb210ff99663c080b6cd97dcc652a7e
SHA512

25d611355b61a95397e7c9077dea57553ccadc0546c5496ce486631bf0c34865855ccaba5e6bb00e829673c6facf09a45b7b131bb1571c5b973285403e9e2f9d
SSDEEP

6144:RdruS75Pe6fFOVFf+AbfiruiL3Lf51LOyOG9mGJ+d+r3xFpB:viS7RpfFcf+bL7fbCKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5de799363c3f81cb1802c57bfdef826d

Files

5de799363c3f81cb1802c57bfdef826d
.exe windows:4 windows x86 arch:x86

9ff28d7e39221d954018cbaaed7e3cf0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
FindClose
GetFileAttributesExW
FindNextChangeNotification
SetEndOfFile
GetCurrentProcess
WritePrivateProfileStringW
GetLogicalDrives
LoadLibraryW
MoveFileW
lstrcpyW
WideCharToMultiByte
GetUserDefaultLangID
InterlockedIncrement
GetCurrentThreadId
ExitProcess
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
FindResourceExW
LoadResource
GetPrivateProfileStringW
WaitForMultipleObjects
GetCurrentThread
CreateFileW
GetModuleFileNameW
CreateThread
GetCurrentProcessId
GetTickCount
FindFirstFileW
SetEvent
WaitForSingleObject

user32

LoadIconW
WindowFromPoint
SetDlgItemTextW
DispatchMessageW
DestroyMenu
PostThreadMessageW
GetMessageW
RedrawWindow
GetSystemMetrics
TrackPopupMenu
GetDlgItem
DialogBoxParamW
PostMessageW
GetParent
DestroyIcon
OffsetRect
GetClassNameW
EndDialog
GetCursorPos
TranslateMessage
SendDlgItemMessageW

gdi32

SetBkColor
SetTextColor
GetObjectW
Rectangle
DeleteDC
BitBlt
GetClipBox
MoveToEx
CreateCompatibleBitmap

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW

shell32

Shell_NotifyIconW

ole32

CoInitialize
CoInitializeEx

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9ff28d7e39221d954018cbaaed7e3cf0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 248KB - Virtual size: 247KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 22KB

.text
Size: 248KB - Virtual size: 247KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 22KB