f77487b90030ed788b151c4b293a8ced

General

Target

f77487b90030ed788b151c4b293a8ced
Size

58KB
MD5

f77487b90030ed788b151c4b293a8ced
SHA1

0f91f409cdd5cdaca89c77f301601afb36c2397e
SHA256

cf36aaea5baa3615091333e98680fc5e475c8c4a2044a92b57c2e602725b7530
SHA512

e2148b201c1c9d43f15985e54b7d3ebb97dd062545edd7bc16e10082154554b35c96fbdf123b85541ef3314f1bde37f31d83f622f5940b2a3ce878530ce1bb3e
SSDEEP

768:jxY6ioGVevZr5J13tuhyEDu564M2NKFG8L4yhtURFvU558alFaSKCLVLjiCO:jxYlo/D1dCytzJNKI9ItULvUT2ZII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f77487b90030ed788b151c4b293a8ced

Files

f77487b90030ed788b151c4b293a8ced
.exe windows:4 windows x86 arch:x86

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetDateFormatA
HeapAlloc
GetStringTypeW
GetStringTypeA
GetFileType
lstrcmpA
Sleep
DeleteFileA
SetLastError
GetCommandLineA
GlobalFree
GetModuleHandleA
GetFileSize
HeapFree
GetLocalTime
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetFileAttributesA

advapi32

RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW

comctl32

ImageList_EndDrag
ImageList_Create
ImageList_AddIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetDragImage
ImageList_AddMasked

user32

LoadCursorA
DrawIcon
BlockInput
GetDC
CreateIcon
CopyImage
DrawTextW
GetFocus
AppendMenuW
AppendMenuA
LoadMenuA
EndDialog
GetWindowTextLengthA
IsWindow
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
AlignRects
GetMenu

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 7KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuEhT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkcznd
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.adata Size: 24KB - Virtual size: 23KB

.hdata Size: 7KB - Virtual size: 39KB

.xLuEhT Size: 2KB - Virtual size: 2KB

.Nkcznd Size: 1024B - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.adata
Size: 24KB - Virtual size: 23KB

.hdata
Size: 7KB - Virtual size: 39KB

.xLuEhT
Size: 2KB - Virtual size: 2KB

.Nkcznd
Size: 1024B - Virtual size: 1KB