47ca904045edcbf7a08ac1017cfaa664

Sharing

Copy URL Twitter E-mail

General

Target

47ca904045edcbf7a08ac1017cfaa664
Size

44KB
MD5

47ca904045edcbf7a08ac1017cfaa664
SHA1

ddb7a9a5b79817ef928da53645e10d1f1bbf83d0
SHA256

21737dacee2ceae69f0c8edf702be6e09e96cae806a8d0945a115f1609086b85
SHA512

995305bdede543c8f2391c4188bb562b274cca831e675b59c8e102402bb057e9ed40be93f831b491c27fc049a27777fe10848aa959090f513bc4a9520e27c26f
SSDEEP

768:VQGkK/Cd0F93oth0shT9uqeEa6EPKdbkhgXoeWMth:VHCYUh009TeEXwY6yout

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47ca904045edcbf7a08ac1017cfaa664

Files

47ca904045edcbf7a08ac1017cfaa664
.exe windows:4 windows x86 arch:x86

08bd2a3e8afe15b3f2e4e43bb4e72656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
CompareStringA
Sleep
FlushFileBuffers
SetStdHandle
VirtualAlloc
SetFilePointer
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CompareStringW
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
TerminateProcess
CloseHandle
GetDriveTypeA
GetCPInfo
WinExec
CopyFileA
GetModuleFileNameA
SetFileAttributesA
CreateFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
HeapReAlloc
HeapAlloc
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetEnvironmentVariableA

user32

KillTimer
UnregisterHotKey
RegisterHotKey
BeginPaint
GetClientRect
EndPaint
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetDC
GetSystemMetrics
FillRect
DrawTextA
PostQuitMessage
SetTimer

gdi32

CreateCompatibleBitmap
SelectObject
CreateSolidBrush
CreateFontA
SetBkMode
SetTextColor
DeleteObject
BitBlt
DeleteDC
CreateCompatibleDC

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08bd2a3e8afe15b3f2e4e43bb4e72656

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 12KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 12KB