79de694d4042036f0a3386cc85c2c52f

Sharing

Copy URL Twitter E-mail

General

Target

79de694d4042036f0a3386cc85c2c52f
Size

95KB
MD5

79de694d4042036f0a3386cc85c2c52f
SHA1

fa84652ac7328b2b59b0a2345efcc6642d616f74
SHA256

bd2d84744e2a83bb7a70584f5ead8934942708832f6139dad32d3cb179228a27
SHA512

1d7e1bad89bb81ac1188be95ecb020dc93a0018240a3a6502115df5427862ef80f07cee623683b5046bd5ad5ffe103e07fa57564cc65430526b401e5fe8a29cb
SSDEEP

1536:taKwCE2RI/WJa6AnVF+3n5QEFIq+KaczHzOIFqXZL70DcRMDGG0:t/VE2S96CVF+X5QMeKaMHtFqh0oRMDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79de694d4042036f0a3386cc85c2c52f

Files

79de694d4042036f0a3386cc85c2c52f
.exe windows:4 windows x86 arch:x86

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerInstallFileA

kernel32

GetCurrentProcess
lstrlenA
VirtualAllocEx
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
GetVersionExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

user32

GetActiveWindow

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder

shlwapi

SHQueryValueExA

gdi32

GetDIBColorTable
SetBkColor
SetPixel
CreateCompatibleDC
CreatePenIndirect
SelectPalette

msvcrt

tan
memcpy
calloc

advapi32

RegCreateKeyExA
GetLengthSid
RegDeleteValueA
RegLoadKeyA

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_Remove
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Add

ole32

OleRun
CoRegisterClassObject
CoRevokeClassObject
StringFromIID
StgOpenStorage
CoCreateGuid
GetHGlobalFromStream

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
SysReAllocStringLen
SysFreeString

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

Imports

version

kernel32

comdlg32

user32

shell32

shlwapi

gdi32

msvcrt

advapi32

comctl32

ole32

oleaut32

Sections

CODE Size: 43KB - Virtual size: 42KB

.rdata Size: 45KB - Virtual size: 45KB

DATA Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 43KB - Virtual size: 42KB

.rdata
Size: 45KB - Virtual size: 45KB

DATA
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB