048c38343fdb6faba06ea6d79b606360

General

Target

048c38343fdb6faba06ea6d79b606360
Size

28KB
MD5

048c38343fdb6faba06ea6d79b606360
SHA1

81e30d86dcbab404b82e6f010d00f2573e667a88
SHA256

f2c5b7abc89359fb675d728d28b96ea488699c5dec732c157338e21eb958463c
SHA512

7f1acb0c32333bd2ae7170f976171d589d1b44f03e0be8136d85d1036b77eb23a556205398bd592a2a83ba722445564f41f18f330f6f9b90f3c667e52a13f5e7
SSDEEP

384:Kh8Pha8eT/wHUrQgaV0GPvpC2+zRY8Zp5aIHGgD1xWX4OEiABdp9:KT8eT//r0mgRizjGgyIOEiO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048c38343fdb6faba06ea6d79b606360

Files

048c38343fdb6faba06ea6d79b606360
.dll windows:4 windows x86 arch:x86

92bec91f87b794034ef653e63e81dc97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
lstrlen
MultiByteToWideChar
OpenMutexA
OpenProcess
ResumeThread
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WinExec

user32

GetWindowDC
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA

gdi32

CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject

shell32

DragAcceptFiles
DragFinish
DragQueryFile

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92bec91f87b794034ef653e63e81dc97

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

DATA Size: 1KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 4KB

.data Size: 5KB - Virtual size: 8KB

CODE Size: 4KB - Virtual size: 4KB

CODE Size: 8KB - Virtual size: 32KB

.text
Size: 8KB - Virtual size: 8KB

DATA
Size: 1KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 4KB

.data
Size: 5KB - Virtual size: 8KB

CODE
Size: 4KB - Virtual size: 4KB

CODE
Size: 8KB - Virtual size: 32KB