2041a3cc55f780169e9e26744b7e9d13

Sharing

Copy URL Twitter E-mail

General

Target

2041a3cc55f780169e9e26744b7e9d13
Size

84KB
MD5

2041a3cc55f780169e9e26744b7e9d13
SHA1

985870e6e2ed34398168322dd4924fa4412b299c
SHA256

234579cbcc1a27879159d2239d2cfc3256af3373a0ca6773849d24c74fe15e61
SHA512

64fcb65eb32698d59d4dba180935aec8d1bdcdaf93b214017614a4fe94fa888444f5b9dab02edac5688af6c7ab0417d7db3c14f499f1a9a59b85ba056cba29fd
SSDEEP

768:GwA5u9g+ZOXu8ikkCwmsIdwz/NKN1AMDE502yJjK+zr:I5u9hY0Ng1AwEbynr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2041a3cc55f780169e9e26744b7e9d13

Files

2041a3cc55f780169e9e26744b7e9d13
.exe windows:4 windows x86 arch:x86

c90d75d0b63d46b4cb9aa91110a739f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegGetKeySecurity
RegLoadKeyA
RegReplaceKeyA
RegDeleteValueA
RegFlushKey
RegDeleteKeyW
RegEnumKeyA
RegQueryValueExW
RegReplaceKeyW
RegOpenKeyW
RegCreateKeyExA
RegOpenKeyExW
RegLoadKeyW
RegCreateKeyW
RegOpenKeyA
RegEnumKeyExW
RegQueryValueA
RegQueryValueExA
RegDeleteValueA
RegFlushKey
RegEnumKeyExA
RegQueryValueA
RegOpenKeyW
RegLoadKeyA
RegDeleteKeyW
RegEnumValueA
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyA
RegCreateKeyExA
RegLoadKeyW
RegOpenKeyA
RegDeleteKeyA
RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumKeyExA
RegOpenKeyW
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyW
RegQueryValueA
RegEnumKeyA
RegOpenKeyExW
RegDeleteKeyW
RegLoadKeyA
RegOpenKeyA
RegQueryValueExW
RegQueryValueW
RegQueryInfoKeyA
RegLoadKeyW

user32

CopyRect
CopyIcon
EndDialog
DialogBoxParamW
CopyImage
GetCursor
GetWindowTextA
CalcMenuBar
BlockInput
DrawTextA
LoadCursorA
IsWindow
AlignRects
CloseWindow
GetDC
CopyRect
GetWindowTextLengthA
DrawIcon
AppendMenuW
BlockInput
EndDialog
LoadMenuA
IsWindow
DrawIconEx
GetCursor
DialogBoxParamA
CalcMenuBar
IsMenu
CalcMenuBar
AppendMenuW
DialogBoxParamW
DrawTextA
CopyIcon
DialogBoxParamA
IsWindow
CreateIcon
GetMenu
LoadMenuA
GetDlgItem
CopyImage
CopyRect
AppendMenuA
GetDC
LoadCursorA
DrawIcon

kernel32

CopyFileExA
GetConsoleMode
OpenFile
GlobalFree
CopyFileExW
CopyFileW
GetLastError
ReadFile
OpenFileMappingA
FindAtomA
CreateThread
DeleteFileW
GetFileSize
Sleep
DeleteAtom
ExitThread
ReadConsoleA
FindFirstFileA
WriteFile

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dkdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c90d75d0b63d46b4cb9aa91110a739f4

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.text Size: 4KB - Virtual size: 2KB

.dkdata Size: 52KB - Virtual size: 48KB

.tls Size: 4KB - Virtual size: 4KB

.rdata Size: 8KB - Virtual size: 7KB

.idata Size: 8KB - Virtual size: 4KB

.edata Size: 4KB - Virtual size: 25KB

.text
Size: 4KB - Virtual size: 2KB

.dkdata
Size: 52KB - Virtual size: 48KB

.tls
Size: 4KB - Virtual size: 4KB

.rdata
Size: 8KB - Virtual size: 7KB

.idata
Size: 8KB - Virtual size: 4KB

.edata
Size: 4KB - Virtual size: 25KB