0283d1869e026f438b6e0688d473993d

Sharing

Copy URL

Twitter E-mail

General

Target

0283d1869e026f438b6e0688d473993d
Size

128KB
MD5

0283d1869e026f438b6e0688d473993d
SHA1

bbb60b0a90c3e5f79ef4947837f54ddbe5747103
SHA256

274ccb80145f1729b12ecff3fdb57f3c0999772ac90966723e3610f2f2fc9e8d
SHA512

c04b46b13e224f781aad80ab53abde468f94c281bb9128f5f320500c5236fc1d0223186ac126ad199c6398ec2a6cb9e76c54d5c43f67c624652516dcc82b014b
SSDEEP

3072:Cx7H7kyZpppiwi2cukOzkU6HY2vip+lRNYS6t:qH7kyZhiofGVnbO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0283d1869e026f438b6e0688d473993d

Files

0283d1869e026f438b6e0688d473993d
.exe windows:4 windows x86 arch:x86

71da3cfe9ef0955e37fcb62eb4e1ea53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
GlobalFree
HeapFree
GetFileType
GetLastError
lstrcpyA
DeleteFileA
SetLastError
lstrlenA
GetStdHandle
FreeLibrary
lstrcatA
GetCommandLineA
lstrcmpiA
GetDateFormatA

user32

IsWindow
AppendMenuW
IsMenu
GetMenu
DialogBoxParamA
CopyRect
DrawTextW
AppendMenuA
GetWindowTextLengthA
AlignRects
CopyImage
CloseWindow
CopyIcon
LoadMenuA
CalcMenuBar
GetCursor
DialogBoxParamW
EndDialog
BlockInput
DrawIcon

comctl32

ImageList_GetIconSize
ImageList_DragMove
ImageList_EndDrag
ImageList_Read
ImageList_DragLeave
ImageList_Copy
ImageList_Draw
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_AddMasked
ImageList_GetIcon
ImageList_LoadImage
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Merge
InitCommonControls
ImageList_Replace
ImageList_Create
ImageList_BeginDrag

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryValueW
RegReplaceKeyA
RegEnumKeyW
RegLoadKeyA
RegQueryValueExW
RegLoadKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumValueW
RegDeleteValueW
RegReplaceKeyW
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegFlushKey
RegEnumKeyExW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qdata
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 6KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccgbZk
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FcweRD
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71da3cfe9ef0955e37fcb62eb4e1ea53

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 14KB - Virtual size: 13KB

.qdata Size: 102KB - Virtual size: 101KB

.xdata Size: 6KB - Virtual size: 58KB

.ccgbZk Size: 1024B - Virtual size: 1KB

.FcweRD Size: 1024B - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.qdata
Size: 102KB - Virtual size: 101KB

.xdata
Size: 6KB - Virtual size: 58KB

.ccgbZk
Size: 1024B - Virtual size: 1KB

.FcweRD
Size: 1024B - Virtual size: 1KB