05e64e8be556765cd1aef4d35235066c

General

Target

05e64e8be556765cd1aef4d35235066c
Size

164KB
MD5

05e64e8be556765cd1aef4d35235066c
SHA1

a5eeb394321c75710ca2be06635462c89c0d3f92
SHA256

48bb2bf17330299b96e41dfd84e8902534daca0c95546c66f929027f6328f0cc
SHA512

da6f668e6583fa3b6b358b217057c8dd7f539b830c066acd51cffa4e09e77e0e75869e73dfea37dc064332651b8d534d6a793c9b8e361853578ed96a2aa7eb31
SSDEEP

3072:BT2xNfzEmPUac0yCRS9EK0TLmPd54U11apoWImsjaAo4e+o9:pkPpe0m15d1pWYjM4e+o9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e64e8be556765cd1aef4d35235066c

Files

05e64e8be556765cd1aef4d35235066c
.exe windows:4 windows x86 arch:x86

7d4588a0360de272d80911753da6f782

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetFileAttributesA
lstrcmpA
GlobalLock
DefineDosDeviceW
GetSystemDirectoryA
IsDBCSLeadByte
SetConsoleMenuClose
SetConsoleTextAttribute
GetSystemDefaultUILanguage
lstrcpyA
_lopen
lstrlenA
GetWindowsDirectoryA
CreateDirectoryA
_lclose
ExitThread
FindFirstFileA
LocalFree
lstrcatA
CompareFileTime
GetShortPathNameA
ExpandEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
WritePrivateProfileStringA
GetPrivateProfileIntA
RemoveDirectoryA
GlobalAlloc
lstrcatA
SetFileAttributesA
lstrcpyW
GetModuleFileNameA
GetComputerNameExW
DeleteFileA
FindNextFileA
GlobalUnlock
SearchPathA
GetProcAddress
lstrcmpiA
GetLogicalDrives
GetPrivateProfileStringA
FindClose
OutputDebugStringW
_llseek

gdi32

GetDeviceCaps

user32

LoadStringA
GetSystemMetrics
MessageBeep
SetDlgItemTextA
GetDesktopWindow
EndDialog

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d4588a0360de272d80911753da6f782

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

gdi32

user32

Sections

.text Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 37KB

.rsrc Size: 2KB - Virtual size: 2KB

.rdata Size: 148KB - Virtual size: 148KB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 37KB

.rsrc
Size: 2KB - Virtual size: 2KB

.rdata
Size: 148KB - Virtual size: 148KB