2500313c9f067e01af97eacbafb1698c

General

Target

2500313c9f067e01af97eacbafb1698c
Size

358KB
MD5

2500313c9f067e01af97eacbafb1698c
SHA1

a6dfd773598771d1b9e0d068cca53a0ef26de541
SHA256

8aea5d8755299d9583319e22c2a649c639e64e546da08cf2d8dc49a1552a241d
SHA512

0a5424c0d94544c09340ba9f3683d1f632a0b9f2f3e1f281d73d39405d6d59e1c64a1a7994c872187b29e96c957fef9e5b0758ec810324daffe24016ca219f96
SSDEEP

6144:4qi61DTut/gidOJSqvbUEoFV8g46FRUitNONX6PEqgxumjyr3Fduf0X85A:9XutddOJX7KXXPEjTnf0Xn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2500313c9f067e01af97eacbafb1698c

Files

2500313c9f067e01af97eacbafb1698c
.exe windows:1 windows x86 arch:x86

1fb618bc438921db76e2ae0e3b82a097

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetDiskFreeSpaceA
GetExitCodeProcess
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegQueryValueA
RegQueryValueExA
SetTokenInformation

gdi32

CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetTextColor

user32

BeginPaint
BlockInput
ClipCursor
FindWindowExA
GetMenu
GetTopWindow
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
SetCaretPos
ShowCaret
SwitchDesktop
TrackMouseEvent
UpdateWindow

Sections

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.V
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fb618bc438921db76e2ae0e3b82a097

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

user32

Sections

.data Size: 68KB - Virtual size: 68KB

.code Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.V Size: 512B - Virtual size: 93B

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 68KB - Virtual size: 68KB

.code
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.V
Size: 512B - Virtual size: 93B

.rsrc
Size: 1KB - Virtual size: 1KB