15e7fb1dc026b6f3a1477013cfc4197d

General

Target

15e7fb1dc026b6f3a1477013cfc4197d
Size

82KB
MD5

15e7fb1dc026b6f3a1477013cfc4197d
SHA1

3554d3147bf48d72b374b386a8992c11404b1bd0
SHA256

9747afa998521ebddd5be46121d234786460ed5d3ccf1b5d2b4d220235a02c78
SHA512

2296520eb99cffb2dda79c798816ebee173b1cf3a290877ee867667508559e2eb2a546dd0b35f843cd358c234f5b48f3ec4072c34f17be13ff3769a0f04cfeaa
SSDEEP

1536:mx3HitcZ/6grsEVnDkhXxy+0QLZoc4kMOkT8ZAliIfOT:i3HqyN5FDkW+0QLZocdMFEA4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e7fb1dc026b6f3a1477013cfc4197d

Files

15e7fb1dc026b6f3a1477013cfc4197d
.exe windows:4 windows x86 arch:x86

ee6865a7bedd2d49d706e5100b2625c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleCount
TerminateProcess
GetStringTypeA
GetCPInfo
SetFilePointer
GetVersion
lstrcatA
MultiByteToWideChar
lstrcpynW
WriteFile
LCMapStringW
GetStartupInfoA
GetACP
CreateFileA
GetStdHandle
GetCurrentProcess
GetStringTypeW
lstrcpyA
GetFileType
GetCommandLineA
lstrcpynA
GetModuleFileNameA

user32

DrawIconEx
CopyRect
LoadCursorA
GetDlgItem
DrawTextA
EndDialog
IsWindow
GetWindowTextA
DrawTextW
GetWindowTextLengthA
CopyImage
LoadMenuA
IsMenu
CreateIcon
GetMenu
GetFocus
DialogBoxParamW
DrawIcon
CloseWindow
GetCursor
GetDC
InsertMenuA
CopyIcon
DialogBoxParamA

comctl32

CreateStatusWindow
ImageList_Create
ImageList_Add
DrawStatusText
CreateStatusWindowW
ImageList_Copy
ImageList_GetIconSize
ImageList_DrawEx
InitCommonControls
ImageList_GetIcon
DrawStatusTextW

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyW
RegEnumKeyA
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyA
RegEnumValueA
RegCreateKeyW
RegEnumKeyExA
RegOpenKeyExA
RegSetValueW
RegDeleteValueW

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 16.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee6865a7bedd2d49d706e5100b2625c9

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 50KB - Virtual size: 16.5MB

.rsrc Size: 25KB - Virtual size: 28KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 50KB - Virtual size: 16.5MB

.rsrc
Size: 25KB - Virtual size: 28KB