2d8b9e4c4d5df4441ee95052991720f6

General

Target

2d8b9e4c4d5df4441ee95052991720f6
Size

48KB
MD5

2d8b9e4c4d5df4441ee95052991720f6
SHA1

a49c50b1a31c75107e02381da40ef9d2e8b8ad0b
SHA256

f69df2420d9fbb63d15908807a86937cc81bc68bbf08681225c56fac2d14662d
SHA512

f4560dd1089b00f216ff1e3d866990ed7ca00d601501eb4ce176abee9789e97adf44075845e92122e5846eee44cf126e07c83c6af6cf9e0377bcd1f1260a522f
SSDEEP

768:/yWflTh/JaW4TJaanEDloTJHfs5eHPFLAOfM3f65Wqvfeu7BS4ixidHnVD:jflTFJazT8anrdUQ9Aogf6zvfek0wdHx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8b9e4c4d5df4441ee95052991720f6

Files

2d8b9e4c4d5df4441ee95052991720f6
.exe windows:4 windows x86 arch:x86

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetCurrentProcess
CreateFileA
SetHandleCount
GetFileType
lstrcpyA
lstrcpynW
GetStringTypeW
SetFilePointer
MultiByteToWideChar
GetStartupInfoA
GetStringTypeA
LCMapStringA
TerminateProcess
GetStdHandle
LCMapStringW
GetVersion
GetOEMCP
lstrcatA
WriteFile
GetCommandLineA
GetCPInfo

user32

DrawIcon
CopyImage
CopyRect
LoadCursorA
GetDC
IsWindow
DialogBoxParamA
DialogBoxParamW
CopyIcon
CreateIcon
DrawTextW
GetFocus
DrawIconEx
CloseWindow
IsMenu
GetCursor
LoadMenuA
GetDlgItem
DrawTextA
GetWindowTextLengthA
EndDialog
InsertMenuA
GetWindowTextA

comctl32

ImageList_LoadImageW
MenuHelp
CreateUpDownControl
CreateToolbarEx
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Copy
DllGetVersion
InitCommonControls
ImageList_DragEnter
DrawStatusText
ImageList_Add

advapi32

RegCreateKeyW
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyA
RegSetValueW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 17.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 42KB - Virtual size: 17.5MB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 42KB - Virtual size: 17.5MB