1149553bd1dbd310bed412318cfc3bfd

Sharing

Copy URL

Twitter E-mail

General

Target

1149553bd1dbd310bed412318cfc3bfd
Size

103KB
MD5

1149553bd1dbd310bed412318cfc3bfd
SHA1

c5bb3ade2640288e4c4bef9a53c381b0624ee67a
SHA256

529fa7e4d7cf3a8832b2e3c840441bf9749460eb7851e256c860c72478994742
SHA512

52809abb41d60c649a35d2a4ccc0dd5a59dcdf597938dff63b8a538b6b79569dca9690dd59695e372d10572e9f038165f29e7aab97b42d1c22393dd99a91e819
SSDEEP

1536:CqJW3IBqpAXmqmuyBXSu6omC/w539lGzNP5x2d5shA73Y:dJW38/4EdVGNxxjhALY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1149553bd1dbd310bed412318cfc3bfd

Files

1149553bd1dbd310bed412318cfc3bfd
.exe windows:4 windows x86 arch:x86

82b892c1560f7376c05585101c514482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHFileOperationA

comctl32

ImageList_Remove
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_Destroy
ImageList_GetBkColor
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_DrawEx
ImageList_Add

ole32

CoReleaseMarshalData
CreateBindCtx
StgCreateDocfileOnILockBytes
PropVariantClear
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoRevokeClassObject
OleRegGetUserType
CreateOleAdviseHolder
StgOpenStorage

comdlg32

GetSaveFileNameA
FindTextA
GetOpenFileNameA

kernel32

GetProcAddress
DeleteFileA
GetModuleHandleA
GetACP
GetOEMCP
GetLastError
ExitThread
VirtualAllocEx
GetProcAddress

oleaut32

SysFreeString
OleLoadPicture
SysStringLen
GetErrorInfo
VariantCopyInd
SafeArrayUnaccessData
VariantChangeType
SafeArrayPtrOfIndex
RegisterTypeLib
SafeArrayGetUBound
SafeArrayUnaccessData
OleLoadPicture
SafeArrayCreate
SysStringLen

user32

IsDialogMessageA
FrameRect
GetWindowDC
CharLowerA
GetCursor
IsWindowVisible
MoveWindow
CreateWindowExA
GetFocus
IsChild

gdi32

GetDIBits
RestoreDC
CreatePalette
BitBlt

advapi32

RegCreateKeyExA
RegOpenKeyA

version

VerFindFileA
GetFileVersionInfoSizeA

shlwapi

SHGetValueA

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 523B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82b892c1560f7376c05585101c514482

Headers

File Characteristics

Imports

shell32

comctl32

ole32

comdlg32

kernel32

oleaut32

user32

gdi32

advapi32

version

shlwapi

Sections

CODE Size: 30KB - Virtual size: 29KB

.rdata Size: 1024B - Virtual size: 523B

.tls Size: 69KB - Virtual size: 68KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 30KB - Virtual size: 29KB

.rdata
Size: 1024B - Virtual size: 523B

.tls
Size: 69KB - Virtual size: 68KB

.data
Size: 1KB - Virtual size: 1KB