57e38e9da6129c6d89fea17fc0256137

Sharing

Copy URL Twitter E-mail

General

Target

57e38e9da6129c6d89fea17fc0256137
Size

4.2MB
MD5

57e38e9da6129c6d89fea17fc0256137
SHA1

c658791641c920a795ec2968660b2e3a86a1ef69
SHA256

e1bbd855a30b87bcbd46e9b801eb774dec7497c7380dc459fddcf11038d34c45
SHA512

22d94ae8e82736c9d1be1f76d0cac30b8dabb656bfe36709165fd3f1367f3ac45264bbee53cf27643132ec53e7e52a383bab48a026897a55bff1bac08f98a83c
SSDEEP

98304:gV6hpDsAC307lgDwyTUbx1lGVdbFNUYVNRLIJCx03y4InhjS:gVA+07WDwMUbx1lGVd11LIgky4oh+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57e38e9da6129c6d89fea17fc0256137

Files

57e38e9da6129c6d89fea17fc0256137
.exe windows:5 windows x86 arch:x86

2ad868600994200040100822f9f7551f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidCreate

mfc42

ord4278

msvcrt

_setmbcp

kernel32

GetVersionExA
GetSystemInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetWindowRgn

gdi32

ExtCreateRegion

advapi32

RegCloseKey

shell32

ShellExecuteA

comctl32

_TrackMouseEvent

ole32

CreateStreamOnHGlobal

olepro32

ord251

oleaut32

VariantInit

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

shlwapi

PathFileExistsA

winmm

timeGetTime

Sections

.text
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc0
Size: - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vc1
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ad868600994200040100822f9f7551f

Headers

File Characteristics

Imports

rpcrt4

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

olepro32

oleaut32

msvcp60

shlwapi

winmm

Sections

.text Size: - Virtual size: 104KB

.rdata Size: - Virtual size: 32KB

.data Size: - Virtual size: 16KB

.vc0 Size: - Virtual size: 4.8MB

.vc1 Size: 4.2MB - Virtual size: 4.2MB

.reloc Size: 4KB - Virtual size: 148B

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: - Virtual size: 104KB

.rdata
Size: - Virtual size: 32KB

.data
Size: - Virtual size: 16KB

.vc0
Size: - Virtual size: 4.8MB

.vc1
Size: 4.2MB - Virtual size: 4.2MB

.reloc
Size: 4KB - Virtual size: 148B

.rsrc
Size: 28KB - Virtual size: 24KB