742c3db6fcaa61d3f8ee1c00957107e6

Sharing

Copy URL

Twitter E-mail

General

Target

742c3db6fcaa61d3f8ee1c00957107e6
Size

94KB
MD5

742c3db6fcaa61d3f8ee1c00957107e6
SHA1

f6f19e674701f55016e2cff29a654b1e194000a5
SHA256

8f75f8714d54249720915fdba35679d5dbb8e1e670709009d9e2ba0dedf35255
SHA512

e10fe491a7f47cc0952673836d1d4760bb31bc4b2fd4965aecd0ad35702af59d4bd97d785fda93551b5e82322fdbea6751409b54de64cc392294022b26d86305
SSDEEP

1536:a1i4kWpQ0DtOTIQIs2qT44TLaAk3g3682zFNK4JX:a1i4kWi0xp7sj446Akwq82ZNZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742c3db6fcaa61d3f8ee1c00957107e6

Files

742c3db6fcaa61d3f8ee1c00957107e6
.exe windows:5 windows x86 arch:x86

672f81f69213302e7c848a04e38932c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCloseKey
GetUserNameW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

user32

GetKeyboardType
MessageBoxA
CreateWindowExW
SetTimer
SendMessageW
RegisterClassExW
PostQuitMessage
LoadIconW
LoadCursorW
GetMessageW
DispatchMessageW
DefWindowProcW
CharLowerW
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetStartupInfoA
GetLastError
GetCommandLineW
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrlenW
WriteFile
WinExec
WaitForSingleObject
Sleep
SizeofResource
SetFilePointer
SetEndOfFile
SetCurrentDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenEventW
LoadResource
GlobalUnlock
GlobalLock
GetVersionExW
GetLocalTime
GetLastError
GetFileSize
GetCurrentDirectoryW
FreeLibrary
FindClose
ExpandEnvironmentStringsW
DeleteFileW
CreateThread
CreateMutexA
CreateFileW
CreateEventW
CopyFileW
CompareFileTime
CloseHandle
GetModuleFileNameA
GetFileAttributesA
GetCommandLineA
FindResourceA
FindNextFileA
FindFirstFileA
CreateFileA

shell32

Shell_NotifyIconW
ShellExecuteW
FindExecutableW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

672f81f69213302e7c848a04e38932c1

Headers

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

shell32

Sections

.text Size: 46KB - Virtual size: 46KB

.itext Size: 1KB - Virtual size: 1KB

.data Size: 6KB - Virtual size: 6KB

.bss Size: - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.rsrc Size: 35KB - Virtual size: 35KB

.text
Size: 46KB - Virtual size: 46KB

.itext
Size: 1KB - Virtual size: 1KB

.data
Size: 6KB - Virtual size: 6KB

.bss
Size: - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.rsrc
Size: 35KB - Virtual size: 35KB