05d6aaca151832feec8bd4014db38dc9

General

Target

05d6aaca151832feec8bd4014db38dc9
Size

45KB
MD5

05d6aaca151832feec8bd4014db38dc9
SHA1

86648988041616568d863256ac27bc98d848c228
SHA256

58be5d603da4749a11220db63460c47c8e535344a824b6623033a557eb5a073d
SHA512

a814fe0f8617d3923588cd2e13e4a4eb4855873686b5a6f5660d0a9a296651839cd5f5f3162c774aff10739e38841146c04b966bf2e636205484ca1f7d212ef3
SSDEEP

768:UypRPRbjEP5PjYQHBIt6Ul83U51QupWG4WLkoAoHMZyDNQnTFtmudl74:TvPVjEP5PjYQHmcFk51Qa4CG9YD6TFtc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05d6aaca151832feec8bd4014db38dc9

Files

05d6aaca151832feec8bd4014db38dc9
.exe windows:4 windows x86 arch:x86

6c321e2abad61eafadb3401b04dcf132

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsolePalette
FreeResource
UnlockFile
HeapSize
CreateSemaphoreW
ResetWriteWatch
ReleaseMutex
GetCurrentProcess
CreateFileMappingA
_hread
SwitchToFiber
lstrcpynA
lstrcatA
OpenProcess
EnumResourceTypesA
SleepEx
IsValidLocale
SetTimeZoneInformation
_lclose
EnumResourceTypesW
ExitProcess
OpenSemaphoreW
GetTempFileNameA
RemoveDirectoryA
GetFileAttributesExW
CreateHardLinkW

user32

GetClipboardFormatNameA
EnumWindows
EndDialog
GetUpdateRgn
MapVirtualKeyExW
mouse_event
RegisterLogonProcess
UnpackDDElParam
GetFocus
DdeUninitialize
RemovePropA
UpdateWindow
GetTopWindow
CharLowerW
AllowSetForegroundWindow
DlgDirListW
WinHelpA
CreateAcceleratorTableW
InflateRect
AdjustWindowRectEx
LoadCursorFromFileW
GetUserObjectInformationA
CreateIconFromResourceEx
GetListBoxInfo
DrawEdge
IsWindowUnicode
SetMessageQueue
GetQueueStatus
GetPropW
Win32PoolAllocationStats
GetKeyNameTextA
GetMonitorInfoW
EnumDisplayMonitors

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6c321e2abad61eafadb3401b04dcf132

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 8KB - Virtual size: 68KB

.rsrc Size: 4KB - Virtual size: 8KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 8KB - Virtual size: 68KB

.rsrc
Size: 4KB - Virtual size: 8KB