086d3a3a206f6ad15ef078e1cb3096a9

General

Target

086d3a3a206f6ad15ef078e1cb3096a9
Size

15KB
MD5

086d3a3a206f6ad15ef078e1cb3096a9
SHA1

097b4ce0fd9f2cddf5cdff6f2fe18e8689146afe
SHA256

b947fa6cc1932323cb3adaafa2dd12ca0d7754e6a5936c286e1aa72d815bcdbe
SHA512

040cc517f40d62b009c116c2f81cea4147dae4cb42cd2d4bb0aaf741127c20e73108b9073232ca5bdc70ed75f1dab5bac616afbb6dfd45c1277c2a01face3b11
SSDEEP

384:ujIl2eW3G+LRpgG4xjvQEhmdrwUbPj3A:ujI4e6GQKxjYEhmdrPPjQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
086d3a3a206f6ad15ef078e1cb3096a9

Files

086d3a3a206f6ad15ef078e1cb3096a9
.exe windows:1 windows x86 arch:x86

106e31a3c277e9f1c743758f8570abf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RevertToSelf
SetTokenInformation

user32

AppendMenuA
BeginPaint
ClipCursor
EqualRect
FindWindowExA
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
SetCaretPos
ShowCaret
TrackMouseEvent
TrackPopupMenuEx
UpdateWindow

Sections

.data0
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

106e31a3c277e9f1c743758f8570abf9

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data0 Size: 512B - Virtual size: 105B

.data Size: 7KB - Virtual size: 7KB

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.data0
Size: 512B - Virtual size: 105B

.data
Size: 7KB - Virtual size: 7KB

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB