216ea489f2a17cf7a8c44720982e6ca8

General

Target

216ea489f2a17cf7a8c44720982e6ca8
Size

86KB
MD5

216ea489f2a17cf7a8c44720982e6ca8
SHA1

ced3dc6c22cc23c9cc3985f9a95365e2496bab89
SHA256

88c5952c49d6c1b0025eb604d4811dbc40f2004d1268ca106627bbe4dc2006a8
SHA512

8cf625de8f657b344ffc32148c9df4e38807591e5c3c7fc87934136f9adeeb5dfe0ccbc66f229b34d15e0f2d66cd811a8f6bf3007d56c832d82717db1cf17113
SSDEEP

1536:wC0BEpi29RDPL9ShXV9FRh1MfYvLziEj0zgTxFvn1Q8PBzdy2w:wf6PtTIpYUoM1B1tPVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
216ea489f2a17cf7a8c44720982e6ca8

Files

216ea489f2a17cf7a8c44720982e6ca8
.exe windows:4 windows x86 arch:x86

381232fb145f217b4d8fe4edbdd9f91e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
CloseWindow
DrawTextW
AppendMenuA
GetDlgItem
DrawIcon
GetWindowTextLengthA
BlockInput
GetCursor
DialogBoxParamA
LoadCursorA
CreateIcon
CopyRect
CopyIcon
InsertMenuA
GetMenu
GetWindowTextA

comctl32

ImageList_LoadImageW
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_AddIcon
ImageList_Remove
ImageList_DragMove
ImageList_GetImageRect
ImageList_Copy
InitCommonControls
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_GetDragImage
ImageList_Merge
ImageList_DragEnter

advapi32

RegFlushKey
RegEnumValueW
RegDeleteValueA
RegReplaceKeyA
RegDeleteValueW
RegCreateKeyW
RegEnumKeyA
RegQueryValueExW
RegOpenKeyW
RegLoadKeyA
RegDeleteKeyW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyA
RegQueryValueW
RegCreateKeyExW
RegGetKeySecurity
RegQueryValueExA
RegLoadKeyW

kernel32

SetLastError
GetLocalTime
GetFileAttributesA
HeapAlloc
GetDateFormatA
GetLastError
GetFileSize
lstrcatA
lstrcpynA
lstrcpyA
GlobalFree
GetFileType
lstrcmpA
FreeLibrary
GetModuleFileNameA
WideCharToMultiByte

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udata
Size: 1KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

381232fb145f217b4d8fe4edbdd9f91e

Headers

File Characteristics

Imports

user32

comctl32

advapi32

kernel32

Sections

.text Size: 10KB - Virtual size: 9KB

.ndata Size: 68KB - Virtual size: 68KB

.udata Size: 1KB - Virtual size: 119KB

.res Size: 2KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.ndata
Size: 68KB - Virtual size: 68KB

.udata
Size: 1KB - Virtual size: 119KB

.res
Size: 2KB - Virtual size: 1KB