72e713ba5941c7567141f37f178ce971

Sharing

Copy URL Twitter E-mail

General

Target

72e713ba5941c7567141f37f178ce971
Size

94KB
MD5

72e713ba5941c7567141f37f178ce971
SHA1

0359fb6154e40402fa4acd2ca3cef9a258628fa4
SHA256

c2649b9017a1813818850962cbc7117d2b0189bf741efc6c543dd820063c5eb7
SHA512

88172562a37c3798e60aa5ae89856192db2beeaa66db2b5f02cf940c0fad43bc69b1bbf97b64fb3ab40a62f762177d4105b79efa5c36ae9f215bd9761057ddf7
SSDEEP

1536:w39gcvK9d8xpOcBebSH8cCBUOCak+OMA5f5OTqsVWA9NmNwfWBDPiMtFihG:w395vK9d2EoemH8cRPXMi8qsRgNwfWB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e713ba5941c7567141f37f178ce971

Files

72e713ba5941c7567141f37f178ce971
.exe windows:5 windows x86 arch:x86

4edc75adcee2de1245d4abd1a177d421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDCOrgEx
GetTextExtentPoint32A
AngleArc
SelectPalette
ExtTextOutA
BitBlt
ExtSelectClipRgn
SetDIBits
SetROP2
GetViewportExtEx
GetTextExtentPoint32W
CombineRgn
GetNearestColor
RestoreDC
PlayMetaFile
SetMapMode
StretchDIBits
GetTextExtentPointA
CloseMetaFile
SetBrushOrgEx
PlayMetaFileRecord
FillRgn
DeleteObject
GetSystemPaletteEntries
DeleteMetaFile
ScaleWindowExtEx
CreateFontW
SetRectRgn
PolyBezierTo

kernel32

ExitProcess
VirtualAlloc
GetCPInfo

version

GetFileVersionInfoA
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA

msvcrt

_adjust_fdiv
strncat
strtol
wprintf
__set_app_type
fputs
__setusermatherr
isxdigit
_open_osfhandle
_CxxThrowException
_itoa
wcstoul
_wfopen
_lock
wcscmp
_strnicmp
_onexit
calloc
mbstowcs
_wcsdup
_beginthread
_dup
iswctype
_purecall
__p__commode
_fileno
wcsncpy
ftell
ctime
__p__fmode
_except_handler3
__p___initenv
gmtime
memmove
_tzset
_initterm
swscanf

advapi32

RegEnumKeyExW
GetTokenInformation
RegEnumKeyExA
LookupPrivilegeValueA
ChangeServiceConfigA
RegSetValueExW
FreeSid
RegDeleteValueA
LookupAccountSidW
GetSecurityDescriptorControl
CloseServiceHandle
InitializeAcl
LockServiceDatabase
RegQueryValueExW
RegOpenKeyW
RegDeleteValueW
UnlockServiceDatabase
RegEnumValueW
AllocateAndInitializeSid
EqualSid

comctl32

CreatePropertySheetPageA
PropertySheetW
ImageList_ReplaceIcon
PropertySheetA
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx
CreateToolbarEx
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Create

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4edc75adcee2de1245d4abd1a177d421

Headers

File Characteristics

Imports

gdi32

kernel32

version

msvcrt

advapi32

comctl32

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 30KB - Virtual size: 75KB

.idata Size: 11KB - Virtual size: 22KB

.rsrc Size: 17KB - Virtual size: 17KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 30KB - Virtual size: 75KB

.idata
Size: 11KB - Virtual size: 22KB

.rsrc
Size: 17KB - Virtual size: 17KB