1783a2c99b6d0b475417c99bd793a994

Sharing

Copy URL

Twitter E-mail

General

Target

1783a2c99b6d0b475417c99bd793a994
Size

179KB
MD5

1783a2c99b6d0b475417c99bd793a994
SHA1

0f2a12d3f87e42a3cf16c5071fb3514478e4ca4a
SHA256

45f83e2916e5488aa2e54d993b68392d0ea47d9000fdfebcb03b67f040b224c4
SHA512

594869daf7250475297c7a171266bf3de6391e7350c60eddad2656bb22d92d268003844f57a28a27de403107434187c6b7986005775573fe3f3cf73067c80f22
SSDEEP

3072:MRCcfK0iGLER5uGj4DfruER0bp19AQTXIdwuD:MOlR5D4Djutbp19AQTXIdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1783a2c99b6d0b475417c99bd793a994

Files

1783a2c99b6d0b475417c99bd793a994
.exe windows:4 windows x86 arch:x86

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_Remove
ImageList_Write
ImageList_Add
ImageList_Draw
ImageList_Destroy
ImageList_Draw
ImageList_GetBkColor
ImageList_Remove
ImageList_Add

advapi32

RegOpenKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegCreateKeyA

kernel32

CreateFileA
GetFullPathNameA
ExitThread
GetModuleHandleA
ExitProcess
VirtualAlloc
ExitThread
LocalAlloc
GetModuleHandleW
IsBadReadPtr
lstrlenA
GetProcAddress
GetACP
LoadLibraryExA

msvcrt

strncmp
rand
wcstol

shlwapi

SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA
PathGetCharTypeA
SHDeleteKeyA

gdi32

CreatePalette
GetCurrentPositionEx
LineTo
CreatePenIndirect
CreateCompatibleDC

shell32

SHFileOperationA
SHGetDesktopFolder

version

VerFindFileA

oleaut32

VariantChangeType
SysReAllocStringLen
SafeArrayUnaccessData
GetErrorInfo
SysStringLen
SysAllocStringLen
VariantCopyInd
SysFreeString
SafeArrayCreate
RegisterTypeLib
VariantChangeType

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

ole32

CoCreateInstanceEx
WriteClassStm

user32

GetMenuItemCount
SetCapture

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA7
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA3
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ead50d771b37f24df7820ee84956dbfb

Headers

File Characteristics

Imports

comctl32

advapi32

kernel32

msvcrt

shlwapi

gdi32

shell32

version

oleaut32

comdlg32

ole32

user32

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 1KB

.DATA1 Size: 2KB - Virtual size: 1KB

.DATA7 Size: 1024B - Virtual size: 867B

.DATA3 Size: 126KB - Virtual size: 125KB

.DATA9 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 1KB

.DATA1
Size: 2KB - Virtual size: 1KB

.DATA7
Size: 1024B - Virtual size: 867B

.DATA3
Size: 126KB - Virtual size: 125KB

.DATA9
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB