0946816baafd114bb33b2d61ba41092b

Sharing

Copy URL Twitter E-mail

General

Target

0946816baafd114bb33b2d61ba41092b
Size

91KB
MD5

0946816baafd114bb33b2d61ba41092b
SHA1

cd0af686969ced92482ab0e4f52761f68ac28e14
SHA256

e13bea11bf29560996439d0beeafe80915fa6704898625740b12aa0fd11f43da
SHA512

0ff159f85a6d0785800b6230c240d65321901d38889ce8c251cc276fd870fa6e06b1c3c7a75855af4b7c07a0ccefffdecfe9bb0d95014e53121ee809cbe4f6be
SSDEEP

1536:KdLEO4TeqI4D/w/S8yYVDcBuuYSQMxZXB448oIO7V2TXbE59sVg0xdy7sdY:gfsewY/S8y4Qh5L58AKXbnfdyw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0946816baafd114bb33b2d61ba41092b

Files

0946816baafd114bb33b2d61ba41092b
.exe windows:4 windows x86 arch:x86

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CalcMenuBar
CreateIcon
CopyRect
EndDialog
DrawTextW
IsWindow
GetCursor
GetWindowTextLengthA
GetDlgItem
CloseWindow
GetWindowTextA
LoadCursorA
DrawIcon
AppendMenuW
AlignRects
BlockInput
DrawTextA
InsertMenuA
GetFocus
CloseWindow
DialogBoxParamA
BlockInput
CreateIcon
GetDlgItem
GetFocus
LoadMenuA
IsWindow
CopyImage
AlignRects
GetMenu
GetDC
GetWindowTextA
DialogBoxParamW
EndDialog
DrawIcon

comctl32

ImageList_GetImageRect
ImageList_AddIcon
InitCommonControls
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Create
ImageList_DragShowNolock
ImageList_LoadImage
ImageList_Draw
ImageList_Copy
ImageList_Merge
ImageList_Destroy
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetImageCount

kernel32

GetStdHandle
GlobalFree
GetModuleHandleA
DeleteFileA
CloseHandle
GetFileSize
GetStringTypeA
lstrcatA
HeapAlloc
GetCommandLineA
GetDateFormatA
Sleep
lstrcmpA
SetLastError
GetFileAttributesA
lstrcpyA
WideCharToMultiByte
lstrcpynA
GetLastError

advapi32

RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueA
RegQueryInfoKeyA
RegCreateKeyExA
RegEnumKeyA
RegEnumKeyExW

Sections

.nTiUvD
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oMoA
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GPTKV
Size: 6KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSIF
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

.gZzOLe
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9cd2998f0c38d3fea6a798ada797c37

Headers

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

Sections

.nTiUvD Size: 14KB - Virtual size: 13KB

.oMoA Size: 65KB - Virtual size: 65KB

.GPTKV Size: 6KB - Virtual size: 61KB

.MSIF Size: - Virtual size: 3KB

.gZzOLe Size: 1KB - Virtual size: 1KB

.nTiUvD
Size: 14KB - Virtual size: 13KB

.oMoA
Size: 65KB - Virtual size: 65KB

.GPTKV
Size: 6KB - Virtual size: 61KB

.MSIF
Size: - Virtual size: 3KB

.gZzOLe
Size: 1KB - Virtual size: 1KB