4aed72f16f52a42c62e768917e3a915d

General

Target

4aed72f16f52a42c62e768917e3a915d
Size

118KB
MD5

4aed72f16f52a42c62e768917e3a915d
SHA1

f0ca738df387b0dbb679bf5aa1b3a8214f6cf4bf
SHA256

bdc6cde970ca1d401294ace7807dd8bcb4401da5032ff38502e9e0d26e7a2ebe
SHA512

fe776b6f4716422524cb7aad663b2a27c983d783ff1c42e1b9d284532f79f9aabd6b2061bb4011533b1ff9e432de96dc89e55d87d4c1fad8b7c5d7c30dd032ac
SSDEEP

1536:ONs2UxNbNQSITk5JC7dbTi5aNGcfUNSTIEkA4BKQpNNA4WHo/bpTpf6g1UReIK2H:nxNaSIaJC7A5ExHk/YHYFTH6LoS04

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aed72f16f52a42c62e768917e3a915d

Files

4aed72f16f52a42c62e768917e3a915d
.exe windows:4 windows x86 arch:x86

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA
RegEnumKeyA
RegQueryValueW
RegEnumValueW
RegReplaceKeyW
RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteKeyW
RegDeleteKeyA
RegQueryValueExA
RegQueryValueA
RegFlushKey
RegQueryValueExW
RegReplaceKeyA
RegLoadKeyW
RegEnumValueA

comctl32

InitCommonControls
ImageList_GetDragImage
ImageList_Destroy
ImageList_EndDrag
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Replace
ImageList_LoadImage
ImageList_Draw
ImageList_GetIcon
ImageList_Read
ImageList_LoadImageA
ImageList_Merge
ImageList_DrawEx
ImageList_GetImageCount
ImageList_DragLeave

user32

DialogBoxParamW
GetDC
LoadCursorA
CalcMenuBar
AppendMenuW
EndDialog
GetDlgItem
CloseWindow
DrawIcon
GetCursor
CopyRect
IsWindow
BlockInput
CreateIcon
GetMenu
DrawTextA
AlignRects

kernel32

CloseHandle
HeapFree
FreeLibrary
WideCharToMultiByte
lstrcatA
GlobalFree
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetFileAttributesA
lstrcpyA
Sleep
GetCPInfo
lstrlenA
GetCommandLineA
GlobalAlloc
lstrcmpA
GetStringTypeW

Sections

.IWnYPN
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.HIvL
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.URaMU
Size: 5KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aeCN
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.XhWjc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750978b93dcbc1cf68320669627acfe4

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.IWnYPN Size: 11KB - Virtual size: 10KB

.HIvL Size: 95KB - Virtual size: 95KB

.URaMU Size: 5KB - Virtual size: 113KB

.aeCN Size: - Virtual size: 1KB

.XhWjc Size: 2KB - Virtual size: 2KB

.IWnYPN
Size: 11KB - Virtual size: 10KB

.HIvL
Size: 95KB - Virtual size: 95KB

.URaMU
Size: 5KB - Virtual size: 113KB

.aeCN
Size: - Virtual size: 1KB

.XhWjc
Size: 2KB - Virtual size: 2KB