725a2bd066d5a9e4b412bc8092b962f9

Sharing

Copy URL Twitter E-mail

General

Target

725a2bd066d5a9e4b412bc8092b962f9
Size

509KB
MD5

725a2bd066d5a9e4b412bc8092b962f9
SHA1

722fd07a5b8a233a45ddf59057ab32c597577270
SHA256

15aeeb3f132974520460a2c4ff1c76229fee1b750c729674a6253309adf8774e
SHA512

4fd64752c3d08c997d198643fa52c7d4bf110960e641035e21bcd788e79f319ff2a9a17942f8e5e100460ef3a3a30360e796c693e90a740e6f6ae721681f4419
SSDEEP

12288:jJmEBOS67T0IQgcrmqmxwp4YwuuhASXjHTWZIP4DwE4WaMu0cUB5F:1O3n0lg4JsBuZI6ci5F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
725a2bd066d5a9e4b412bc8092b962f9

Files

725a2bd066d5a9e4b412bc8092b962f9
.exe windows:1 windows x86 arch:x86

fb38c9cef17c671733af35a44f9a574e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

advapi32

GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RevertToSelf
SetTokenInformation

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
FillPath
GetDeviceCaps
GetNearestColor
SetBkColor
SetTextColor

user32

BeginPaint
ClientToScreen
ClipCursor
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
SetCaretPos
ShowCaret
ShowCursor
SwitchDesktop
TrackMouseEvent
TrackPopupMenuEx

Sections

.data0
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

fb38c9cef17c671733af35a44f9a574e

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

Sections

.data0 Size: 512B - Virtual size: 208B

.data Size: 81KB - Virtual size: 80KB

.code Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 177B

.reloc Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 580B

.reloc Size: 512B - Virtual size: 472B

.data0
Size: 512B - Virtual size: 208B

.data
Size: 81KB - Virtual size: 80KB

.code
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 177B

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 580B

.reloc
Size: 512B - Virtual size: 472B