493947c6185524268a3321b5da78e426

General

Target

493947c6185524268a3321b5da78e426
Size

172KB
MD5

493947c6185524268a3321b5da78e426
SHA1

4087bf89cc9b402629f8835ccd4fdc954aa2fd16
SHA256

ed1f20db5f67c282a614a63acc319bcbe8d811e70b9df24f7863612c40d7f79e
SHA512

5b6321e25a6f89f660acfc7d2993cfc19ab233c96f6365aa90d0a22ad7d0352e90ef35a421ea0be15d1c8859cac6f9a0d7ee7f98223ade3878ef979704bc85ce
SSDEEP

3072:bjaxtp3LTy/5PRYKFDp2Ba5+UqCXPC0vyFo7NmZZ0gVuPxG:bjaxnK/bYa/rfX7NmD0dP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
493947c6185524268a3321b5da78e426

Files

493947c6185524268a3321b5da78e426
.exe windows:4 windows x86 arch:x86

342f302ba867db80f190ff2d91d938d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

InterlockedDecrement
MultiByteToWideChar
GlobalLock
WaitForMultipleObjects
HeapSetInformation
FindAtomA
lstrcmpW
MulDiv
GetProcessId
Sleep
SetLastError
CreateThread
GlobalAlloc
InterlockedExchange
FlushInstructionCache
lstrlenA
GetComputerNameW
GetSystemDirectoryW
GetModuleFileNameW
LocalAlloc
EnumResourceLanguagesW
GetCurrentProcess
InterlockedIncrement
GlobalFree
InitializeCriticalSection
GlobalHandle
OpenProcess
LeaveCriticalSection
CreateFileW
GetLocaleInfoW
ProcessIdToSessionId
RaiseException
FormatMessageW
GetStringTypeA
WaitForSingleObject
EnterCriticalSection
GetTickCount
CloseHandle
DeleteCriticalSection
GlobalUnlock
lstrlenW
WideCharToMultiByte

oleacc

CreateStdAccessibleObject

shlwapi

StrRetToStrA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW

Sections

.text
Size: 88KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

342f302ba867db80f190ff2d91d938d2

Headers

File Characteristics

Imports

shell32

kernel32

oleacc

shlwapi

Sections

.text Size: 88KB - Virtual size: 480KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 88KB - Virtual size: 480KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB