097496de0098400117a320fa4873b051

Sharing

Copy URL

Twitter E-mail

General

Target

097496de0098400117a320fa4873b051
Size

531KB
MD5

097496de0098400117a320fa4873b051
SHA1

72c691cf05b1bede7d207485d3e909365c1adbb3
SHA256

0dab72cd0ef769b73f2619be34c075244a0b08b50a4553e4a65aba7f6f8e707c
SHA512

5f2664810e8e7fad2addc1e2ff71fc0e5f905a4f22d476ece8b7420bba62ea0b96832e21ae1ee155bcac66d2886619c5b36fa611a05f06a7c570cc8a742458e8
SSDEEP

12288:9bGmhyFDmey6BiR+CSpV++RcGQB9o59G2E/aiNw:9vyFD7y6BiR+CsvRc//ofG2o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097496de0098400117a320fa4873b051

Files

097496de0098400117a320fa4873b051
.exe windows:4 windows x86 arch:x86

37f7a9f4c82b138b8635b145196a0e36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
SetLastError
HeapSize
CompareStringA
GetCurrentProcess
HeapFree
GetLocaleInfoA
GetStartupInfoW
SetConsoleTitleA
GetConsoleMode
GetLocaleInfoW
FreeLibrary
LoadLibraryA
OpenFileMappingW
GetCurrentThread
InterlockedExchange
GetEnvironmentStringsW
IsValidCodePage
GetLastError
TerminateProcess
SetFilePointer
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
FreeEnvironmentStringsW
CreateMutexA
DeleteCriticalSection
EnterCriticalSection
QueryPerformanceCounter
WriteFile
WideCharToMultiByte
VirtualFree
ReadFile
IsValidLocale
GetStringTypeExW
GetModuleHandleA
HeapAlloc
GetModuleFileNameW
WriteConsoleA
GetCommandLineW
InterlockedDecrement
GetConsoleOutputCP
GlobalAddAtomA
LeaveCriticalSection
GetStringTypeA
HeapCreate
GetFileType
RtlUnwind
LCMapStringA
TlsSetValue
CreateFileA
GetTimeZoneInformation
EnumSystemLocalesA
SetEnvironmentVariableA
ExitProcess
GetProcAddress
HeapReAlloc
VirtualQuery
GetCurrentProcessId
GetModuleHandleW
InterlockedIncrement
WriteProfileStringA
GetTickCount
GetLogicalDrives
GetNumberFormatA
FlushFileBuffers
GetUserDefaultLCID
TlsAlloc
InitializeCriticalSectionAndSpinCount
OpenMutexA
WriteConsoleW
GetCPInfo
CompareStringW
HeapDestroy
GetStartupInfoA
SetHandleCount
GetSystemTimeAsFileTime
GetACP
LCMapStringW
lstrcmpi
WriteProfileSectionA
GetStringTypeW
UnhandledExceptionFilter
CloseHandle
GetConsoleCP
SetConsoleCtrlHandler
GetDateFormatA
TlsGetValue
SetConsoleTextAttribute
SetStdHandle
VirtualAlloc
GetTimeFormatA
MultiByteToWideChar
GetStdHandle
GetModuleFileNameA
Sleep
GetCommandLineA
TlsFree

advapi32

CryptEnumProviderTypesW
LookupSecurityDescriptorPartsW
RegQueryValueExW
CryptHashSessionKey
LookupPrivilegeNameA
CryptGetDefaultProviderA
CryptDuplicateKey
RegCreateKeyExW
CryptDeriveKey
RegDeleteKeyA
CryptGetProvParam
ReportEventW
RegConnectRegistryA
RegOpenKeyExW
RegCreateKeyA
RegEnumKeyW

comctl32

InitCommonControlsEx

user32

SetWindowsHookW
UnregisterDeviceNotification
DdePostAdvise
RedrawWindow
SetDoubleClickTime
SetClipboardViewer
SetMenuItemInfoW
GetMessageW
DrawEdge
CreateWindowExA
ChangeMenuW
GetTopWindow
EnumDisplayDevicesW
DefDlgProcW
IsDialogMessageA
RegisterClassA
GetUserObjectSecurity
RegisterClassExA

gdi32

GetPixelFormat
StrokeAndFillPath
GetTextCharset
CreateFontW
SetROP2
SetColorAdjustment
TranslateCharsetInfo
GetColorSpace
Arc
GdiPlayJournal
EnumICMProfilesA
CreatePatternBrush
GetDIBColorTable

comdlg32

LoadAlterBitmap
ChooseFontA

shell32

SHGetFileInfoW
SHBrowseForFolderA
ShellAboutW

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37f7a9f4c82b138b8635b145196a0e36

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

gdi32

comdlg32

shell32

Sections

.text Size: 191KB - Virtual size: 191KB

.rdata Size: 10KB - Virtual size: 36KB

.data Size: 316KB - Virtual size: 316KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 191KB - Virtual size: 191KB

.rdata
Size: 10KB - Virtual size: 36KB

.data
Size: 316KB - Virtual size: 316KB

.rsrc
Size: 12KB - Virtual size: 11KB