097aca704b2621070cd7121107725f38

General

Target

097aca704b2621070cd7121107725f38
Size

12KB
MD5

097aca704b2621070cd7121107725f38
SHA1

a2c694951abee6cf65434a998d1f6b3928e2dde3
SHA256

74b0827fe41b2986e94284e7e27f3a4c785fad3044230e9bc0294c888ada4369
SHA512

120c7bbfac4cf1062606840fe57df3b0dd4c3a761415c83465f5d53796ad0878211e81ec3e7bb2595d0b83ff5d4173391e30b22ad94e62ee085a77d031b5fc8a
SSDEEP

192:hEfeH+tZW/+O/x9dVHxfaCYUsY4gpewRcY9BC80f:hE2HgZwVRSOewcY9v0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
097aca704b2621070cd7121107725f38

Files

097aca704b2621070cd7121107725f38
.exe windows:4 windows x86 arch:x86

c07da1eb997a41a00cddd4f83f735494

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dorta32

UninstallHook
InstallHook

gdi32

SelectObject
LineTo
GetObjectA
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
MoveToEx

user32

TranslateMessage
SendMessageA
ReleaseDC
RegisterClassExA
PostQuitMessage
OpenClipboard
GetWindowTextA
GetSystemMetrics
GetMessageA
GetForegroundWindow
GetDC
GetCursorPos
GetClipboardData
GetClassNameA
FindWindowExA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
CloseClipboard
wsprintfA

kernel32

lstrlenA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
WriteFile
WinExec
SystemTimeToFileTime
Sleep
ReadFile
LocalFree
LocalAlloc
GlobalFree
GlobalAlloc
CloseHandle
CompareStringA
CreateDirectoryExA
CreateFileA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetFileSize
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetSystemTime

advapi32

GetUserNameA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyA

wsock32

connect
gethostbyname
htons
inet_addr
closesocket
recv
send
socket
inet_ntoa
WSAStartup

wininet

InternetGetConnectedState

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c07da1eb997a41a00cddd4f83f735494

Headers

File Characteristics

Imports

dorta32

gdi32

user32

kernel32

advapi32

wsock32

wininet

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 15KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 15KB