f9323618dfb41d252903a14566563b79

General

Target

f9323618dfb41d252903a14566563b79
Size

79KB
MD5

f9323618dfb41d252903a14566563b79
SHA1

ae92f9361702cf90ec3b1b58f9e3691faae4bc4f
SHA256

e58c6be8ef74c96b8d313b251eeaf8f3357696bbeae5f0f7905918fa33dbef92
SHA512

2e7f3d60b50875caa58720b156eb5645bd79753c42a7f7ce1a3ad26c896473e13bc98ff202c7f97f13bf4ccab6807baeef9e71e243a3bf7bbe5d942288c4a0f1
SSDEEP

768:oalMuxEx2yh+jwk9TgYn4wvsmA7pImPFhYJKpDxw8p:oaxELQGmA73dhfpG8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9323618dfb41d252903a14566563b79

Files

f9323618dfb41d252903a14566563b79
.exe windows:5 windows x86 arch:x86

655b4d602d50534838f029cb0c73d49f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegConnectRegistryW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

kernel32

LocalFree
lstrcmpW
ReleaseMutex
WaitForSingleObject
CreateThread
SetEvent
CloseHandle
SetPriorityClass
OpenProcess
TerminateProcess
CreateEventW
CreateMutexW
lstrlenW
lstrcmpiW
lstrcpyW
GetComputerNameW
LocalAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
LCMapStringA
LCMapStringW

user32

SendDlgItemMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
CreateDialogParamW
LoadCursorW
PostQuitMessage
SetClassLongW
LoadIconW
PostMessageW
MessageBoxW
SetFocus
DestroyWindow
EnableWindow
GetDlgItem
DialogBoxParamW
PeekMessageW
SetCursor
SendMessageW
wsprintfW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
SetDlgItemInt
CheckRadioButton

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

655b4d602d50534838f029cb0c73d49f

Headers

File Characteristics

Imports

advapi32

kernel32

user32

Sections

.text Size: 35KB - Virtual size: 34KB

.data Size: 10KB - Virtual size: 11KB

.rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 35KB - Virtual size: 34KB

.data
Size: 10KB - Virtual size: 11KB

.rsrc
Size: 26KB - Virtual size: 26KB