57047c8aa3a6b7b7adec9b852d190ba1

General

Target

57047c8aa3a6b7b7adec9b852d190ba1
Size

69KB
MD5

57047c8aa3a6b7b7adec9b852d190ba1
SHA1

e5cc220866b2635a9d6f88533490c84c60d5f8b4
SHA256

ba338b2a5cdcf97efb5aaaafd637e0c03c7f4c289f4aaf80fc1427353e690261
SHA512

cd555d312da9aede4ab0e44361b27d65ac8cf871ad78fbf7924ead1e2e5b05b2ca8d9590bc2269aa560a07d28ca49fbcff10b18a407d0ec41248438179a7d187
SSDEEP

1536:Xqt/H21RZyKaiKIIfHWzVJGNCHE8Gp0GWnFmF6Kf/wgH+K:XqFHATnLKIu2zVxlEmmwKfIgHn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57047c8aa3a6b7b7adec9b852d190ba1

Files

57047c8aa3a6b7b7adec9b852d190ba1
.exe windows:4 windows x86 arch:x86

7be2d2be00395b2677ca3d70aa331534

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
RegCreateKeyExA
RegCreateKeyW
RegDeleteValueA
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyA
RegQueryValueA
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueW
RegDeleteKeyW
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegGetKeySecurity

comctl32

ImageList_GetDragImage
ImageList_GetImageRect
ImageList_LoadImageA
ImageList_EndDrag
ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Read
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Copy
InitCommonControls
ImageList_Destroy
ImageList_DragLeave
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_GetIcon
ImageList_Create

kernel32

GetFileSize
CreateDirectoryA
CreateThread
DeleteFileA
DeleteAtom
GetComputerNameA
CopyFileExW
CreateProcessA
GetLastError
GetCPInfo
GetCommandLineA
GlobalFree
ReadFile
CopyFileW
WriteFile
SetLastError
CopyFileExA

user32

LoadMenuA
GetFocus
EndDialog
GetWindowTextA
IsWindow
IsMenu
DrawIconEx
LoadCursorA
GetWindowTextLengthA
DrawTextW
CopyImage
DrawIcon
CopyRect
GetDlgItem
CloseWindow
AppendMenuW
BlockInput
CalcMenuBar

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7be2d2be00395b2677ca3d70aa331534

Headers

File Characteristics

Imports

advapi32

comctl32

kernel32

user32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 60KB - Virtual size: 195KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 60KB - Virtual size: 195KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: - Virtual size: 1KB