2684191409ed38bf2894c6e98f5758b6

Sharing

Copy URL Twitter E-mail

General

Target

2684191409ed38bf2894c6e98f5758b6
Size

95KB
MD5

2684191409ed38bf2894c6e98f5758b6
SHA1

75f3c4c957a3e4d36de884c449315ce51926643d
SHA256

77ecdf75e0abad169afbb8db6f5a7d30f21f294a0f6307361d01e79f19ed2fe0
SHA512

e7f675b8c061bf70429ca8a79a446022c0dd49079ec9c5a7ee8d6e4bfa598c73319ade1c54c68974747ecdc419e89d16c453b7bf1703f1d5c3b904047584693b
SSDEEP

1536:LaKwCE2RI/WJa6AnVF+3n5QEFIq+KaczHzOIFqXZL70DcRMDGG0:L/VE2S96CVF+X5QMeKaMHtFqh0oRMDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2684191409ed38bf2894c6e98f5758b6

Files

2684191409ed38bf2894c6e98f5758b6
.exe windows:4 windows x86 arch:x86

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
VerInstallFileA

kernel32

GetCurrentProcess
lstrlenA
VirtualAllocEx
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
GetVersionExA

comdlg32

GetOpenFileNameA
GetFileTitleA
FindTextA
GetSaveFileNameA

user32

GetActiveWindow

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA
SHGetDesktopFolder

shlwapi

SHQueryValueExA

gdi32

GetDIBColorTable
SetBkColor
SetPixel
CreateCompatibleDC
CreatePenIndirect
SelectPalette

msvcrt

tan
memcpy
calloc

advapi32

RegCreateKeyExA
GetLengthSid
RegDeleteValueA
RegLoadKeyA

comctl32

ImageList_Read
ImageList_DragShowNolock
ImageList_Write
ImageList_Remove
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx
ImageList_Create
ImageList_Draw
ImageList_Add

ole32

OleRun
CoRegisterClassObject
CoRevokeClassObject
StringFromIID
StgOpenStorage
CoCreateGuid
GetHGlobalFromStream

oleaut32

SysAllocStringLen
VariantChangeType
SysStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
SysReAllocStringLen
SysFreeString

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f84c0a0799a9338ade195183beb7ff7

Headers

File Characteristics

Imports

version

kernel32

comdlg32

user32

shell32

shlwapi

gdi32

msvcrt

advapi32

comctl32

ole32

oleaut32

Sections

CODE Size: 43KB - Virtual size: 42KB

.rdata Size: 45KB - Virtual size: 45KB

DATA Size: 2KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 1KB

CODE
Size: 43KB - Virtual size: 42KB

.rdata
Size: 45KB - Virtual size: 45KB

DATA
Size: 2KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 1KB