1e37008e1bf5631dfcce0d6be5966461

General

Target

1e37008e1bf5631dfcce0d6be5966461
Size

58KB
MD5

1e37008e1bf5631dfcce0d6be5966461
SHA1

305a3f499976189966fc3c55c3cf49e5c9e9b810
SHA256

4823b30db314c05c74cf0e6b8b7f28d39b033c9d93073cd0a1c535a1afb33e87
SHA512

bfb11c642aa32f1ca01a588cc0f598c1c21bea6bf99be5888570aaa5d4eeaa9e93ed9adfa5be3f143e8a8ff8a46a7384b31a4f1d5ff2c3ea15f447baca29c7b9
SSDEEP

768:cC477icEgMxvflpbxACxNc23YAm8hifbw5uz5Jfzf6k/KTIjOuy0wW9GpWT:r2vMx33rc2IEwD/RziaTxZw2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e37008e1bf5631dfcce0d6be5966461

Files

1e37008e1bf5631dfcce0d6be5966461
.exe windows:4 windows x86 arch:x86

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
lstrcatA
Sleep
GetStdHandle
CloseHandle
HeapFree
GetCPInfo
SetLastError
lstrcpynA
HeapAlloc
GetFileType
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLocalTime
GetFileSize

comctl32

ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_Replace
ImageList_GetIcon
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_GetImageCount
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_LoadImage
ImageList_Copy
ImageList_GetImageRect
ImageList_DrawEx
ImageList_Destroy
ImageList_LoadImageW
ImageList_Draw

advapi32

RegLoadKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyExW
RegReplaceKeyA
RegQueryValueExA
RegEnumKeyA
RegDeleteValueA
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyW
RegLoadKeyW

user32

CalcMenuBar
DrawTextA
DialogBoxParamW
CloseWindow
DrawIconEx
DialogBoxParamA
GetWindowTextA
CopyRect
LoadCursorA
GetMenu
CopyIcon
GetCursor
IsWindow
DrawTextW
CreateIcon
GetDlgItem
AlignRects
GetDC

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ddata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.resr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5689d26d20351e4a88dfa7d01d905c2

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Sections

.text Size: 9KB - Virtual size: 9KB

.ddata Size: 24KB - Virtual size: 24KB

.odata Size: 4KB - Virtual size: 12KB

.reloc Size: - Virtual size: 3KB

.resr Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.ddata
Size: 24KB - Virtual size: 24KB

.odata
Size: 4KB - Virtual size: 12KB

.reloc
Size: - Virtual size: 3KB

.resr
Size: 2KB - Virtual size: 1KB