490ad59e28bef2b5112ef2112f75bb4a

Sharing

Copy URL Twitter E-mail

General

Target

490ad59e28bef2b5112ef2112f75bb4a
Size

434KB
MD5

490ad59e28bef2b5112ef2112f75bb4a
SHA1

b0de777ce4d9d77fd334796dde80990eec2faee5
SHA256

1b4066d7a9ae11c81e81c8826590cd5e48ecd8638ec389d16b4ef72ebffd41b8
SHA512

7790c49c97d6bed093eda4dc8cb3226b8971e6212e05b97fc9db7acddd85c847668f34bdfba12ce3f623475a0504ae23d24c2d25293d025f92feba8ff4a88cd7
SSDEEP

6144:svl/9U3pojAQ7qc7uZfxlwVGdljxHcVHJd7COJA7qJYNe5Qk1Y8EC5EjWmbsScv2:sxexWG3x8pIHq1Wl2Scv0RxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490ad59e28bef2b5112ef2112f75bb4a

Files

490ad59e28bef2b5112ef2112f75bb4a
.exe windows:4 windows x86 arch:x86

50d630d36fd9c825da7d3f00e07ffba7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextLengthA
MessageBoxExA
ShowOwnedPopups
GetParent
EnumThreadWindows

ole32

CoAddRefServerProcess
CoTaskMemFree
OleSetContainedObject
CoUnmarshalHresult
CoGetStandardMarshal

advapi32

RegQueryMultipleValuesA
RegConnectRegistryA
RegQueryInfoKeyA
RegFlushKey

kernel32

MultiByteToWideChar
LoadLibraryA
LCMapStringA
VirtualAlloc
GetOEMCP
GetACP
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapReAlloc
VirtualFree
CreateEventA
GetSystemDefaultLCID
WritePrivateProfileStructA
SetFilePointer
GetModuleHandleA
GetProcAddress
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetFileType
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tau
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50d630d36fd9c825da7d3f00e07ffba7

Headers

File Characteristics

Imports

user32

ole32

advapi32

kernel32

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 106KB - Virtual size: 105KB

.data Size: 4KB - Virtual size: 84KB

tau Size: 296KB - Virtual size: 296KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 106KB - Virtual size: 105KB

.data
Size: 4KB - Virtual size: 84KB

tau
Size: 296KB - Virtual size: 296KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 3KB - Virtual size: 3KB