fc58260526a56967895598a463274990

Sharing

Copy URL Twitter E-mail

General

Target

fc58260526a56967895598a463274990
Size

64KB
MD5

fc58260526a56967895598a463274990
SHA1

5ab6a5b4b0b2549ddde71a319ff534cd08c483ac
SHA256

e616e4a3604e71360f82d54bf788018be17962c747b17c7b0113fd1d6d93299b
SHA512

11e16ec2aa5f04c6cf9a98cc6c4d0a70a285f26b947962382c8263544c70b6e20cecaba655265d4b98861d4e75b1ec51c3300154e513e07eb53e1a3a1c7b857b
SSDEEP

768:7DpeALq2eLim7x2wnqP3vjdR0lyoVpdDQpOi5fiB9epN4V3E2MhxoxAjlUU6g9IS:vpAJF2clVpypbZ+nQoxABrn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc58260526a56967895598a463274990

Files

fc58260526a56967895598a463274990
.exe windows:4 windows x86 arch:x86

518ade91d7b2b6e16f6ee70431d31074

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetPrivateProfileIntA
GetVersion
WideCharToMultiByte
FreeEnvironmentStringsW
CloseHandle
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RaiseException
SetStdHandle
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetFileAttributesA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
SetFilePointer
HeapDestroy
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError

user32

CreateWindowExA
GetWindowLongA
SendMessageA
LoadStringA
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
DestroyWindow
ShowWindow
GetClientRect
RegisterClassA
LoadCursorA
DefWindowProcA
GetWindowTextA
MessageBoxA
ExitWindowsEx
PostQuitMessage

gdi32

DeleteDC
GetDeviceCaps
CreateFontIndirectA
CreateDCA

advapi32

RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA

comctl32

ord17

Exports

Exports

WndProc

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

518ade91d7b2b6e16f6ee70431d31074

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 8KB