1e4a984634614f76ecf63d2555772c2c

Sharing

Copy URL Twitter E-mail

General

Target

1e4a984634614f76ecf63d2555772c2c
Size

72KB
MD5

1e4a984634614f76ecf63d2555772c2c
SHA1

ab1cdf31957977ced38d48740ac052440a9f4db7
SHA256

86272221703c42e8a39b5a014ae75960b85de6dd3c4d68b8dc748b3750a6c932
SHA512

822ed21a413572827a68735e4c2f75f5a8d5f1225b6ba97db51eb897ff622477c8a33df3962a58ef287072569c3e4a3646a2c95ea1cb4335d73cf28dcee45370
SSDEEP

1536:+VDzP4Gr9TAvkU6WQsNpOZyhV4D8VPV/QNIg:sQ49EvkUlQEMQVVRV/QNz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e4a984634614f76ecf63d2555772c2c

Files

1e4a984634614f76ecf63d2555772c2c
.exe windows:4 windows x86 arch:x86

e89f4b61f9a780e49ecb993a6c0b45f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExW
RegDeleteKeyW
RegReplaceKeyA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegReplaceKeyW
RegLoadKeyW
RegOpenKeyA
RegDeleteValueW
RegFlushKey
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyW
RegEnumKeyW
RegLoadKeyA
RegQueryInfoKeyW
RegEnumKeyA
RegOpenKeyW
RegGetKeySecurity
RegEnumValueW
RegQueryValueExA
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyW
RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueExW
RegFlushKey
RegCreateKeyExW
RegQueryValueA
RegReplaceKeyA
RegLoadKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyW
RegOpenKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueW
RegQueryValueW
RegEnumKeyExW
RegLoadKeyA
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegEnumValueA
RegGetKeySecurity
RegEnumValueW
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyW
RegReplaceKeyW

user32

GetWindowTextA
IsMenu
AlignRects
BlockInput
GetMenu
AppendMenuW
GetCursor
GetDC
DialogBoxParamW
InsertMenuA
LoadCursorA
LoadMenuA
DrawTextW
CloseWindow
GetWindowTextLengthA
CalcMenuBar
AppendMenuA
DrawIcon
IsWindow
CopyIcon
EndDialog
CopyImage
DrawIconEx
DrawTextA
GetDlgItem
CreateIcon
CopyRect
DialogBoxParamA
GetFocus

kernel32

CloseHandle
GetModuleHandleA
CloseHandle
GetLastError
CloseHandle
GlobalFree
CloseHandle
DeleteFileA
CloseHandle
lstrcmpA
CloseHandle
ExitProcess
CloseHandle
FreeLibrary
CloseHandle
GetStdHandle

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.d57a
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.r26ta
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e89f4b61f9a780e49ecb993a6c0b45f1

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 14KB - Virtual size: 14KB

.d57a Size: 48KB - Virtual size: 47KB

.r26ta Size: 5KB - Virtual size: 80KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 14KB - Virtual size: 14KB

.d57a
Size: 48KB - Virtual size: 47KB

.r26ta
Size: 5KB - Virtual size: 80KB

.rsrc
Size: 1024B - Virtual size: 4KB