05feb860c9bfd71b91880406ebee0431

General

Target

05feb860c9bfd71b91880406ebee0431
Size

1.2MB
MD5

05feb860c9bfd71b91880406ebee0431
SHA1

91da4df10239b7ce7a3404306bbfd0e6b9bb8833
SHA256

36c3e5e724038d8e8579106ba73be2a560859feee637ef8e9844a0b9b606bcae
SHA512

bf6a1805bc4a856eb26fb146610005432c3f597ce1292e08837687b0be6a8a1cb4a257b7e64fbe16f16366209a781d19ba025f0915e75afe5ebf82141da6800f
SSDEEP

24576:7Mz2dc7qdVJR5Qlfc4p+kwhP1znwUoLKer0lQROFFRE62BBBmK:u2dc72zi+rrF1znA9ROW62BBBm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05feb860c9bfd71b91880406ebee0431

Files

05feb860c9bfd71b91880406ebee0431
.exe windows:5 windows x86 arch:x86

c2fe3b75efaec99320550b7430f206c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ILAppendID
DragAcceptFiles
SHCreateShellFolderView
PathCleanupSpec
ILClone
RealShellExecuteExA
RealDriveType
SHFindFiles
SHLoadInProc
RestartDialogEx
DuplicateIcon
SHChangeNotifyRegister
IsNetDrive
OpenRegStream
IsLFNDrive
DragQueryFile
SHBrowseForFolder
SHGetDiskFreeSpaceExA
SHGetFolderPathAndSubDirA
ShellExecuteA
ShellExec_RunDLL
ILIsParent
PathGetShortPath
SHGetFileInfo
SHGetPathFromIDListA
SHRestricted
SHEmptyRecycleBinA
SHCreateDirectory
DllRegisterServer
SHGetInstanceExplorer
Options_RunDLLA
PathQualify
SHFormatDrive
DAD_DragLeave
Shell_GetImageLists
SHPathPrepareForWriteA
SHCloneSpecialIDList
SHGetSpecialFolderLocation
ShellAboutA

kernel32

GetEnvironmentStringsA
ConnectNamedPipe
SetFilePointer
GetSystemTime
CreateMutexA
GetCurrentThreadId
ExpandEnvironmentStringsA
GetSystemTimeAdjustment
FreeEnvironmentStringsA
CreateFileA
CloseHandle
CreateMailslotA
OpenProcess
ReadFile
GetLastError
OpenMutexA
GetFileAttributesA
VirtualAllocEx
SetNamedPipeHandleState
ReleaseMutex
GetNamedPipeHandleStateA

user32

DispatchMessageA
CharNextA
EnableMenuItem
GetMenu
GetMessageA
UpdateWindow
CheckMenuItem
CreateWindowExA
GetClipboardData
DefWindowProcA
DestroyWindow
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMessage
ShowWindow
GetClientRect
HideCaret
SendMessageA
CheckMenuRadioItem
RegisterClassExA

Sections

.text
Size: 635KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2fe3b75efaec99320550b7430f206c1

Headers

DLL Characteristics

File Characteristics

Imports

shell32

kernel32

user32

Sections

.text Size: 635KB - Virtual size: 635KB

.data Size: 235KB - Virtual size: 235KB

.rsrc Size: 320KB - Virtual size: 3.4MB

.text
Size: 635KB - Virtual size: 635KB

.data
Size: 235KB - Virtual size: 235KB

.rsrc
Size: 320KB - Virtual size: 3.4MB