5720f00e4d370c57b438a1096a23f1be

General

Target

5720f00e4d370c57b438a1096a23f1be
Size

369KB
MD5

5720f00e4d370c57b438a1096a23f1be
SHA1

303c3a93f84b59adc7923ef8f1d49142c7a7a0af
SHA256

d03ce24f33c471e125853ad07bb5fb5fcf9fecb359488c2e1e1dfe0a7be24e18
SHA512

bc04a18b6258e71c39dd39aff8a51db6011b94c06f4526cf1accd488ff97cd463c20633fc81355339fc327c5f0c9ffd504f9d0af70b0a31e78e780c332783c7a
SSDEEP

6144:BvihVkhW3EkVBW/23g5SJFiUWOaMuXDhQXCmHTsOGEt1PpQ:k0h7kbW/23uU1QD2FHYO/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5720f00e4d370c57b438a1096a23f1be

Files

5720f00e4d370c57b438a1096a23f1be
.exe windows:4 windows x86 arch:x86

306d24ecb146e742da689076689cde0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualQuery
GetProcAddress
GetNumberFormatW
RtlUnwind
GetCompressedFileSizeA
MoveFileW
GetCurrentProcess
GetProcAddress
VirtualAlloc
GetCurrentThreadId
ExpandEnvironmentStringsA
HeapReAlloc
HeapAlloc
SetCurrentDirectoryA
GetFileType
HeapFree
InterlockedExchange
GetModuleFileNameA
TerminateProcess
GetModuleHandleA
ExitProcess
MoveFileExW
FreeEnvironmentStringsW
lstrcmpW
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
WaitCommEvent
GetNamedPipeHandleStateW
CommConfigDialogA
QueryPerformanceCounter
OpenMutexW
CreateSemaphoreW
LocalFree

comdlg32

PageSetupDlgA
PrintDlgA
GetOpenFileNameW
FindTextA
ChooseFontW
GetSaveFileNameW
PrintDlgW

advapi32

RegCloseKey
GetUserNameW
RegConnectRegistryA
CryptCreateHash
CryptGenRandom
CryptDecrypt
InitializeSecurityDescriptor
RegQueryValueA
LookupSecurityDescriptorPartsA
LookupPrivilegeDisplayNameA
LookupAccountNameA
CryptDuplicateHash
CryptImportKey
RegReplaceKeyW
RegQueryInfoKeyW
RegSaveKeyW
CryptDuplicateKey
RegReplaceKeyA
RegSetKeySecurity
RegSaveKeyA
CryptDestroyHash
StartServiceA
ReportEventW
LookupAccountSidA
RegDeleteValueW

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

306d24ecb146e742da689076689cde0e

Headers

File Characteristics

Imports

kernel32

comdlg32

advapi32

Sections

.text Size: 95KB - Virtual size: 94KB

.data Size: 263KB - Virtual size: 262KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 95KB - Virtual size: 94KB

.data
Size: 263KB - Virtual size: 262KB

.rsrc
Size: 10KB - Virtual size: 9KB