3be996dbe29d85cb6001d5e49284803a

Sharing

Copy URL Twitter E-mail

General

Target

3be996dbe29d85cb6001d5e49284803a
Size

88KB
MD5

3be996dbe29d85cb6001d5e49284803a
SHA1

60d7462e7ac75d5b906abba8324819eefa524dce
SHA256

45d96757332d05574a66248b1e03f52b4db648d7a05fcc2ccef50c60ec102b8c
SHA512

e4791ecb9c4606340fdc802159998d7c99342a527e432837d7a1d0d13053f8b04dfaaabc143a579f4b0eddf35c5df27c480885e076b30705feb47936eef16d0f
SSDEEP

1536:9A90KqnRCkXtKOL4IUAXdmj7CBfPLc7oZRNK:yiKINLJ8CBfPI7oZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3be996dbe29d85cb6001d5e49284803a

Files

3be996dbe29d85cb6001d5e49284803a
.exe windows:4 windows x86 arch:x86

b1f2c980d480d9882b0622358d889b3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsMenu
GetWindowTextLengthA
CopyRect
CopyImage
CalcMenuBar
DialogBoxParamW
DialogBoxParamA
BlockInput
CopyIcon
DrawIcon
LoadMenuA
EndDialog
DrawIconEx
CloseWindow
AlignRects
InsertMenuA
AppendMenuA
CreateIcon
DrawTextW

comctl32

ImageList_DragEnter
ImageList_GetIconSize
ImageList_EndDrag
ImageList_GetDragImage
ImageList_DragLeave
ImageList_DragMove
InitCommonControls
ImageList_Remove
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Create
ImageList_DrawIndirect
ImageList_LoadImage
ImageList_DrawEx
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_BeginDrag
ImageList_Merge
ImageList_LoadImageA
ImageList_Read

gdi32

RestoreDC
GetDCOrgEx
DeleteObject
ExtTextOutA
GetCurrentPositionEx
CloseFigure
ExcludeClipRect
AddFontResourceExW
CopyMetaFileA
AddFontMemResourceEx
ClearBrushAttributes
CancelDC
CreateSolidBrush
SetTextColor
ClearBitmapAttributes
GetClipBox
GetPixel

kernel32

GetFileSize
lstrcpyA
GetFullPathNameA
WideCharToMultiByte
GetLastError
GetDateFormatA
GetModuleFileNameA
GetStringTypeA
GlobalAlloc
GetStringTypeW
CloseHandle
lstrlenA
GetCommandLineA
HeapAlloc
SetLastError
GlobalFree
lstrcatA
GetStdHandle
lstrcmpA

advapi32

RegGetKeySecurity
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyExW
RegCreateKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegQueryValueA
RegDeleteValueW
RegLoadKeyA
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueA
RegFlushKey
RegQueryValueW
RegQueryInfoKeyA
RegEnumValueA

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1f2c980d480d9882b0622358d889b3f

Headers

File Characteristics

Imports

user32

comctl32

gdi32

kernel32

advapi32

Sections

.text Size: 8KB - Virtual size: 4KB

.data Size: 68KB - Virtual size: 64KB

.rdata Size: 4KB - Virtual size: 96KB

.reloc Size: - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 4KB

.data
Size: 68KB - Virtual size: 64KB

.rdata
Size: 4KB - Virtual size: 96KB

.reloc
Size: - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 2KB