046807af1485124d2b00f5842d0369dd

Sharing

Copy URL Twitter E-mail

General

Target

046807af1485124d2b00f5842d0369dd
Size

144KB
MD5

046807af1485124d2b00f5842d0369dd
SHA1

ded310e8e067e9320b9abd66a7de6267e3812e96
SHA256

ad6f4f70f73cd5701d3496b6f493a0e7a467d9bd7f7ce79d62110c315da5e99d
SHA512

196d34f8ed4300ae209a79b8c9e13d4873d69c815d0cab81c8aeb1aea4cf19503c7b14cf33c4245e55547ec5d3d250317be89f36147ab447c5695ef6db945209
SSDEEP

3072:q+EtNeC+jOc2NFbFaQNOC+WxppdSV6bd:RE3c2NF5aF/W3SVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046807af1485124d2b00f5842d0369dd

Files

046807af1485124d2b00f5842d0369dd
.exe windows:4 windows x86 arch:x86

f5972c849eeb3d082cc96d93f3f41f3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
GetDC
CopyIcon
LoadCursorA
GetDlgItem
CalcMenuBar
GetWindowTextA
GetFocus
GetMenu
DrawTextW
DrawTextA
DialogBoxParamA
CopyImage
AlignRects
InsertMenuA
LoadMenuA
IsMenu
DrawTextW
CloseWindow
GetCursor
CopyRect
DrawIcon
GetMenu
GetDC
InsertMenuA
AppendMenuW
DialogBoxParamA
GetWindowTextA
CreateIcon
EndDialog
DrawIcon
GetWindowTextA
GetWindowTextLengthA
IsWindow
GetFocus
GetMenu
GetCursor
CopyRect
IsMenu
CalcMenuBar

kernel32

FindFirstFileA
CreateThread
FindAtomA
GetStdHandle
GetCommandLineA
GetOEMCP
GetCurrentProcessId
ExitThread
GetCurrentThread
CreateDirectoryA
GetLastError
GetComputerNameA
DeleteAtom
GetFileSize
Sleep
GetUserDefaultLangID
GetCurrentThread
Sleep
GetUserDefaultLangID
CreateDirectoryA
GetCommandLineA
OpenFile
GetConsoleOutputCP
FindFirstFileA
GetCurrentProcessId
GetCurrentProcess
GetFileTime
GetOEMCP
GlobalFree
FindAtomA
GetLastError
CopyFileW
GetCommandLineA
GetConsoleOutputCP
GetOEMCP
CreateDirectoryA
GetStdHandle
GlobalFree
CreateThread
GetCurrentProcess
Sleep
GetCurrentProcessId
GetUserDefaultLCID
GetCPInfo
GetUserDefaultLangID
FindFirstFileA
GetFileTime
OpenFile
GetConsoleMode
CopyFileW
GetFileTime
GetStdHandle
GetFileSize
CreateDirectoryA
FindAtomA
GetConsoleOutputCP
ExitProcess
GetComputerNameA
GlobalFree
GetCurrentProcess
FindFirstFileA
GetCommandLineA
GetLastError
GetCurrentThread
DeleteAtom
Sleep
GetComputerNameA
GetCurrentThread
OpenFile
CopyFileW
DeleteAtom
FindFirstFileA
DeleteFileW
GetUserDefaultLangID
ExitThread
GetConsoleOutputCP
Sleep
GetStdHandle
GetFileSize
GetFileTime
GetCPInfo
DeleteAtom
GetCurrentThread
GetCommandLineA
GetConsoleMode
GlobalFree
GetCurrentThreadId
GetLastError
GetComputerNameA
FindAtomA
Sleep
GetUserDefaultLangID
FindFirstFileA
GetConsoleOutputCP
GetStdHandle
CreateProcessA
OpenFile

Sections

.itext
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 100KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5972c849eeb3d082cc96d93f3f41f3e

Headers

File Characteristics

Imports

user32

kernel32

Sections

.itext Size: 29KB - Virtual size: 28KB

.rdata Size: 9KB - Virtual size: 9KB

.init Size: 100KB - Virtual size: 368KB

.idata Size: 4KB - Virtual size: 3KB

.itext
Size: 29KB - Virtual size: 28KB

.rdata
Size: 9KB - Virtual size: 9KB

.init
Size: 100KB - Virtual size: 368KB

.idata
Size: 4KB - Virtual size: 3KB