222313df5cf65197e6077d283a00c389

Sharing

Copy URL Twitter E-mail

General

Target

222313df5cf65197e6077d283a00c389
Size

199KB
MD5

222313df5cf65197e6077d283a00c389
SHA1

08aed7543e68a257dfb3ff3efa40df7102c44486
SHA256

8dc9110dbe4ac45523e14aa8e070045fb4e9d2c92afff45359bf7c1a86bbdeff
SHA512

49c3ea5cc06186d221186be0b59f2078480e9b0f9f6dd74cfa30a7d17228086a4afb34240253dd4c87556eb3a60bb4ee8fdd8e8f00de0466c33ff117351cc43c
SSDEEP

3072:D+CWCOvZyol2dVZZ7sHQLUzc9hCCdbJrWvga:rcvICIZZgHQLL9hCCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222313df5cf65197e6077d283a00c389

Files

222313df5cf65197e6077d283a00c389
.exe windows:4 windows x86 arch:x86

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
CreateDIBSection
GetDCOrgEx
SaveDC
GetRgnBox
CreateCompatibleDC
GetObjectA
RestoreDC
GetDIBits

comdlg32

FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
ChooseColorA
GetSaveFileNameA

version

VerQueryValueA
VerFindFileA
VerFindFileA
VerQueryValueA
VerInstallFileA
VerFindFileA
VerQueryValueA

kernel32

LoadLibraryA
IsBadReadPtr
LocalAlloc
ExitProcess
GetModuleHandleA
GetVersionExA
GetLastError
LoadLibraryExA
IsBadHugeReadPtr
ExitThread
GetProcAddress
VirtualAlloc
Sleep

user32

CharLowerA
GetKeyboardState

shlwapi

PathFileExistsA
SHSetValueA
SHQueryValueExA
SHQueryInfoKeyA

ole32

CoCreateFreeThreadedMarshaler

msvcrt

strcmp
mbstowcs
clock
_acmdln
fabs
malloc
exp
log10
memcmp

oleaut32

SysFreeString
VariantChangeType
SafeArrayPtrOfIndex
SafeArrayCreate

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA

advapi32

RegCreateKeyExA
RegOpenKeyA

comctl32

ImageList_Read
ImageList_Write

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 857B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA9
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA4
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA0
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA7
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9c5b4718337d388a7a1641018adc992

Headers

File Characteristics

Imports

gdi32

comdlg32

version

kernel32

user32

shlwapi

ole32

msvcrt

oleaut32

shell32

advapi32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

.data Size: 1024B - Virtual size: 857B

.DATA9 Size: 2KB - Virtual size: 1KB

.DATA4 Size: 118KB - Virtual size: 118KB

.DATA0 Size: 16KB - Virtual size: 15KB

.DATA7 Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

.data
Size: 1024B - Virtual size: 857B

.DATA9
Size: 2KB - Virtual size: 1KB

.DATA4
Size: 118KB - Virtual size: 118KB

.DATA0
Size: 16KB - Virtual size: 15KB

.DATA7
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB