3d9a677ec60a3493bb4e8a53dd0cdae4

General

Target

3d9a677ec60a3493bb4e8a53dd0cdae4
Size

285KB
MD5

3d9a677ec60a3493bb4e8a53dd0cdae4
SHA1

50a9f88d3f0a6e739448feb738c7a8633044f333
SHA256

9f613dcad83a0667f77f7854f0cce2271e2dfca832ffa601c639ba2229e2ccd5
SHA512

5330ab21d1249f0234f9abb751607ac3afebc33c5c0a31cec94d0a9813f960545d4e8f4b6b7a9d10fd13707cf6d7422cb54cd89e596a9692d32e47cb0ad5cc02
SSDEEP

6144:2Fr8XRup34sB7VF4iE/XO3KxiYVS7GK5xxt8ZkBrVk6s36Gn+W:2Nx4A7vG/ea8cSFxx60rVJs36G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9a677ec60a3493bb4e8a53dd0cdae4

Files

3d9a677ec60a3493bb4e8a53dd0cdae4
.exe windows:4 windows x86 arch:x86

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

lstrlenA
GetProcessHeap
GetWindowsDirectoryA
GlobalFindAtomW
HeapFree
LoadLibraryExW
ExpandEnvironmentStringsW
LoadLibraryW
FindClose
ReleaseMutex
GetPrivateProfileIntW
lstrcmpiW
GetModuleHandleW
LoadLibraryExA
CopyFileW
HeapAlloc
LocalFree
WritePrivateProfileStringW
GetSystemInfo
EnumResourceLanguagesA
GetPrivateProfileIntW
GetCurrentDirectoryW
FindNextFileW
GetCurrentProcessId
GetPrivateProfileStringW
FreeLibrary
WaitForSingleObject
CreateMutexW
SetFileAttributesW
GetModuleHandleA
GetSystemDirectoryW
FindFirstFileW
GetCurrentProcess

shlwapi

GetAcceptLanguagesA
UrlUnescapeW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathRemoveFileSpecW
PathCreateFromUrlW
PathAppendW
UrlCreateFromPathW
PathCombineW

rpcrt4

UuidCreate

Sections

.text
Size: 142KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62bb4a50aa2855d4ddae949894f8c644

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

rpcrt4

Sections

.text Size: 142KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 139KB - Virtual size: 139KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 139KB - Virtual size: 139KB

.rsrc
Size: 1024B - Virtual size: 4KB