5458066a7a52d56b80ba488e273b6972

General

Target

5458066a7a52d56b80ba488e273b6972
Size

46KB
MD5

5458066a7a52d56b80ba488e273b6972
SHA1

eb4bf7092a8eb438d7747f096d5e89e4d35c8f9c
SHA256

551dcb0e6ed619609a79a65ed4bccbc94f6eff4dbc18286b0d55bc97bf8ae6de
SHA512

5d278cb34483941f3696de179fc3c25be0a5ac90c6fc43d4560c3cb6b700a47f070c87cbb8e9078ee0d6a62b35eacb4d62b785d5539bec610d6d63c8e40982e5
SSDEEP

768:V7G2LS6BRxfB7ebAWGKSy0Z5WFw0FhlF+Bx9SKO/En:VFxf8cIVSrSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5458066a7a52d56b80ba488e273b6972

Files

5458066a7a52d56b80ba488e273b6972
.exe windows:4 windows x86 arch:x86

0b6c8c9195c0678313ce4906782a4742

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetImageRect
ImageList_AddIcon
ImageList_GetImageInfo
ImageList_LoadImage
ImageList_LoadImageA
ImageList_DragMove
ImageList_Read
ImageList_DrawEx
ImageList_GetDragImage
ImageList_DragEnter
InitCommonControls
ImageList_LoadImageW
ImageList_GetIcon
ImageList_BeginDrag
ImageList_Remove
ImageList_Merge
ImageList_Copy
ImageList_GetIconSize
ImageList_Replace

kernel32

SetLastError
GetFileSize
ReadFile
CreateProcessA
DeleteFileA
CopyFileExW
OpenFileMappingA
CopyFileExA
WriteFile
GetCommandLineA
CreateThread
FindAtomA
CopyFileA
Sleep
ReadConsoleA
FindFirstFileA
GetFileTime

gdi32

GetPixel
ExtTextOutA
AddFontResourceTracking
AddFontResourceW
AddFontResourceExW
RestoreDC
AddFontResourceExA
DeleteObject
GetPixel
BitBlt
CancelDC
CloseFigure
GetCurrentPositionEx
CopyMetaFileA
AddFontMemResourceEx
AbortPath
ExcludeClipRect
AddFontResourceA
ClearBrushAttributes
GetBitmapBits

advapi32

RegOpenKeyA
RegEnumKeyA
RegGetKeySecurity
RegLoadKeyW
RegQueryValueExW
RegCreateKeyExW
RegReplaceKeyA
RegReplaceKeyW
RegOpenKeyExW
RegCreateKeyW
RegOpenKeyW
RegDeleteValueA
RegFlushKey
RegEnumValueA
RegEnumValueW
RegDeleteValueW
RegQueryValueA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 466B

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b6c8c9195c0678313ce4906782a4742

Headers

File Characteristics

Imports

comctl32

kernel32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 29KB - Virtual size: 50KB

.rsrc Size: 10KB - Virtual size: 9KB

.reloc Size: - Virtual size: 466B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 29KB - Virtual size: 50KB

.rsrc
Size: 10KB - Virtual size: 9KB

.reloc
Size: - Virtual size: 466B