1a185f7ed632697d57c07b080a2d92da

Sharing

Copy URL Twitter E-mail

General

Target

1a185f7ed632697d57c07b080a2d92da
Size

33KB
MD5

1a185f7ed632697d57c07b080a2d92da
SHA1

410334b23c538a4c173659b496bc00c1720e3461
SHA256

2fa08be61a155a8321a7007964204a72d5cb668acc84253ffd67e52594403d7d
SHA512

7b8658058f5d52a86a0be41676e45712fddba320f5494346b25a4757a44b3ba90c3b119443374b6b73ec39ec77bf1bbf8795b8a92f862ecf3bedc9eada11166a
SSDEEP

384:akgtML9svX3DF5tf7cAdFjf5DBEERd7IgrRJ0BU16H85fV/MTxgLh4hj:Bg9nDFff7cgFjvEG7Io8BI6c1ygL6hj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a185f7ed632697d57c07b080a2d92da

Files

1a185f7ed632697d57c07b080a2d92da
.exe windows:4 windows x86 arch:x86

e8f5a3c8bdfc68754b9fc5d2bec90a65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExW
RegDeleteValueW
RegLoadKeyW
RegDeleteValueA
RegEnumKeyW
RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegReplaceKeyA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegReplaceKeyW
RegDeleteKeyW
RegOpenKeyW
RegLoadKeyA
RegQueryValueW
RegEnumValueA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueA
RegFlushKey
RegQueryValueExW
RegEnumKeyW
RegOpenKeyW
RegGetKeySecurity
RegReplaceKeyA
RegOpenKeyExA
RegLoadKeyA
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegEnumKeyA
RegQueryValueExA
RegLoadKeyW
RegEnumValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueA
RegOpenKeyA
RegQueryInfoKeyA
RegGetKeySecurity
RegDeleteKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExW

kernel32

FindFirstFileA
GetCPInfo
CopyFileExW
CreateProcessA
GlobalFree
CopyFileExA
FindAtomA
CopyFileA
GetConsoleMode
ExitThread
CopyFileW
Sleep
GetCommandLineA
CreateDirectoryA
ReadConsoleA
GetComputerNameA
DeleteFileW
GetFileSize
SetLastError
GetStdHandle
WriteFile
OpenFile
OpenFile
GetLastError
CreateDirectoryA
DeleteFileW
CreateProcessA
GetComputerNameA
GetStdHandle
DeleteFileA
GlobalFree
GetCommandLineA
GetFileSize
GetCPInfo
CopyFileExW
CopyFileW
CreateThread

comctl32

ImageList_Create
ImageList_DrawIndirect
ImageList_DragMove
ImageList_Draw
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_GetIcon
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_Merge
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_DragLeave
ImageList_AddMasked
ImageList_DrawEx
ImageList_Remove
ImageList_EndDrag
ImageList_Read
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_LoadImage
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_Copy
ImageList_LoadImageA
ImageList_LoadImageW
ImageList_DragMove
ImageList_DragLeave
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
InitCommonControls
ImageList_Draw
ImageList_GetImageCount

gdi32

AddFontMemResourceEx
DeleteObject
AddFontResourceTracking
ClearBrushAttributes
ClearBitmapAttributes
AddFontResourceA
RestoreDC
BeginPath
SetTextColor
ExtTextOutA
GetClipBox
AddFontResourceExW
CloseFigure
GetDCOrgEx
GetCurrentPositionEx
AddFontResourceExA
GetPixel
CopyMetaFileA
AbortPath
GetBitmapBits
CloseMetaFile
CloseFigure
SetTextColor
CreateSolidBrush
GetBrushOrgEx
GetCurrentPositionEx
ExcludeClipRect
BitBlt
CopyMetaFileA
ClearBitmapAttributes
CancelDC
BeginPath
AddFontMemResourceEx
RestoreDC
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceW
GetPixel
AddFontResourceExA
GetBitmapBits
GetPixel
AddFontResourceA
DeleteDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8f5a3c8bdfc68754b9fc5d2bec90a65

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

gdi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 22KB - Virtual size: 42KB

.rsrc Size: 1024B - Virtual size: 954B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 22KB - Virtual size: 42KB

.rsrc
Size: 1024B - Virtual size: 954B