36759663857d66d7dc44d9b084694cef

General

Target

36759663857d66d7dc44d9b084694cef
Size

428KB
MD5

36759663857d66d7dc44d9b084694cef
SHA1

a2c74b0ea555da3dc9d6ade4801b74a0830eeab4
SHA256

991a2e0b74bfbf5359976184272fb18c9d09e11d35b1049650fbec60835dfa57
SHA512

1b81a813e0705842d46ea24c0e759485b590949d703acd18a83f0690efa9e35c12b1a575c2df34a9c49db62b18c3616a5eb7a513dcc9d194ced933d7bc8fe4fd
SSDEEP

12288:boPnDdq5GRR9Gcgqzy9/a9EcNANYfE7wBm8:boPDwgDQcgqOmnNAdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36759663857d66d7dc44d9b084694cef

Files

36759663857d66d7dc44d9b084694cef
.exe windows:4 windows x86 arch:x86

b7d210bbc3725c09ffbbffb761765f57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
IsDebuggerPresent
GetLocalTime
FindResourceExA
QueryPerformanceCounter
GetCurrentProcess
HeapAlloc
LoadLibraryA
SetCriticalSectionSpinCount
ExitProcess
CreateDirectoryExA
GlobalFix
GlobalAddAtomA
GetSystemTimeAsFileTime
InterlockedExchange
GetTickCount
GetCurrentProcessId
GetModuleHandleA
HeapFree
ExitThread
RtlUnwind
TerminateProcess
GetModuleFileNameA
HeapReAlloc
SetThreadAffinityMask
GetCurrentThreadId
VirtualAlloc
EnumSystemCodePagesW
GetProcAddress

comdlg32

ReplaceTextW
LoadAlterBitmap
PrintDlgW

advapi32

RegSetKeySecurity
CryptContextAddRef
CryptGetUserKey
CryptGetHashParam
CryptSetKeyParam
CryptGetDefaultProviderA
CryptDecrypt
RegCreateKeyA
CryptEnumProviderTypesW
CryptVerifySignatureW
CryptImportKey
LogonUserW
RegCreateKeyW
RegConnectRegistryA
RegQueryInfoKeyA
RegDeleteKeyW
DuplicateToken
CryptAcquireContextA
StartServiceA

gdi32

UpdateICMRegKeyW
CreateScalableFontResourceA
GetRgnBox
GetTextMetricsA
GetTextColor
RemoveFontResourceA
EnumFontsA
GetPixel
SetPixelFormat
CreateDIBitmap
CreateEnhMetaFileA
GetKerningPairsA
GetViewportExtEx
SetSystemPaletteUse
GetKerningPairs
EndPage
ColorMatchToTarget
GetTextExtentExPointW

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7d210bbc3725c09ffbbffb761765f57

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

gdi32

Sections

.text Size: 161KB - Virtual size: 161KB

.data Size: 264KB - Virtual size: 263KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 161KB - Virtual size: 161KB

.data
Size: 264KB - Virtual size: 263KB

.rsrc
Size: 2KB - Virtual size: 1KB