1360aeaf6034262544b7351782b36658

General

Target

1360aeaf6034262544b7351782b36658
Size

70KB
MD5

1360aeaf6034262544b7351782b36658
SHA1

edd85d92d689ff625b7899ca0d21285e68baa22d
SHA256

36a69e63e77c65a4d7e00e0e8e38c256df89a478ec22df951591e0678f346a23
SHA512

2b1407e4b913f560f9aad6bce1900a8ed0204f67b949aa101534efba0bbb21bb83e0019bfb8f767cea96545216309c2ab1441ecace3dff7746f741c0b7c01f06
SSDEEP

1536:6VIt6WDxPAN4EvlBDmQBui5EHo41gQSuHVhTKZX54lv:6VIFKNh/DmQIi5EjgQSuHLTIQv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1360aeaf6034262544b7351782b36658

Files

1360aeaf6034262544b7351782b36658
.exe windows:1 windows x86 arch:x86

10b03c85a0c079cf5c97af886906f427

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

GetPrivateObjectSecurity
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RevertToSelf
SetTokenInformation

user32

AppendMenuA
BeginPaint
ClipCursor
EqualRect
FindWindowExA
GetMenu
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
SetCaretPos
ShowCaret
TrackPopupMenuEx
UpdateWindow

Sections

.data0
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10b03c85a0c079cf5c97af886906f427

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data0 Size: 512B - Virtual size: 104B

.data Size: 62KB - Virtual size: 62KB

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.data0
Size: 512B - Virtual size: 104B

.data
Size: 62KB - Virtual size: 62KB

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB