58477a8f8a707fa0d6b49f148fca0ae4

Sharing

Copy URL Twitter E-mail

General

Target

58477a8f8a707fa0d6b49f148fca0ae4
Size

100KB
MD5

58477a8f8a707fa0d6b49f148fca0ae4
SHA1

0137b0fab4976c788907ed3424100237cd1163c1
SHA256

6209aa3077320f8cce6f98a32b485542d88aa3c0e56a4e0847ab6996cd2cfe52
SHA512

c037acb458981f70750a08737b7c636b0273177a3484cd9b745a5398c0be8ac20c3618558a645dfe4e7eb71fe4cfdf0cba3dc63de516d5acdcc6e27be536a6b2
SSDEEP

1536:2kAsypY9vWt24H5vaYRv4Am4ntuQDRlRWzXj:/c4vWBHNaupjtNlRWLj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58477a8f8a707fa0d6b49f148fca0ae4

Files

58477a8f8a707fa0d6b49f148fca0ae4
.exe windows:4 windows x86 arch:x86

48f9920e30e93dfd0ca948a9fab91508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA

comdlg32

GetSaveFileNameA

kernel32

FormatMessageA
EnumCalendarInfoA
SetThreadLocale
GetCurrentThread
CloseHandle
GetFileSize
GetThreadLocale
CreateEventA
ResetEvent
GetStringTypeA
FreeResource
GetLastError
GlobalAlloc
GlobalAddAtomA
CompareStringA
Sleep
GetUserDefaultLCID
GetCPInfo
GetTickCount
MoveFileExA
FindResourceA
SetHandleCount
GetLocaleInfoA
lstrcpynA
MoveFileA
HeapFree
GetCurrentThreadId
lstrcatA
GetSystemDefaultLangID
GetOEMCP
LoadLibraryExA
GetCurrentProcessId
HeapAlloc
GetEnvironmentStrings
VirtualQuery
VirtualAllocEx
ExitThread
GetDiskFreeSpaceA
GetModuleHandleA
LoadLibraryA
WriteFile
WaitForSingleObject
GetModuleFileNameA
lstrlenA
GetProcessHeap
VirtualAlloc
SetEndOfFile
GetProcAddress
SetErrorMode
GetStringTypeW

msvcrt

tan
abs
strcmp
memcpy
time

shlwapi

PathGetCharTypeA
SHQueryValueExA
SHQueryInfoKeyA
PathIsContentTypeA
SHDeleteKeyA
SHGetValueA
SHSetValueA
PathFileExistsA
PathIsDirectoryA
SHDeleteValueA

user32

CharLowerBuffA
DrawIconEx
FindWindowA
GetKeyboardType
CreateMenu
GetClassNameA
CloseClipboard
SetPropA
DefMDIChildProcA
InvalidateRect
SendMessageA
GetSubMenu
MapVirtualKeyA
CharToOemA
GetClientRect
CallWindowProcA
IsChild
CreatePopupMenu
IsRectEmpty
ClientToScreen
GetWindow
CreateIcon
GetMenuItemInfoA
GetWindowDC
ActivateKeyboardLayout
GetKeyNameTextA
IsDialogMessageA
FillRect
SetMenu
GetCursor
ReleaseDC
DrawEdge
SetScrollInfo
GetMenu

ole32

CoGetContextToken
CoFreeUnusedLibraries
CreateBindCtx
StgCreateDocfileOnILockBytes
CoCreateGuid
ReleaseStgMedium
OleRun
CLSIDFromString
CoDisconnectObject

gdi32

GetDIBits
CreateBitmap
SaveDC
SelectObject
CreatePenIndirect
GetBitmapBits
SetBkColor
SelectPalette

comctl32

ImageList_Read
ImageList_DrawEx
ImageList_Remove
ImageList_GetBkColor
ImageList_Destroy
ImageList_Draw

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48f9920e30e93dfd0ca948a9fab91508

Headers

File Characteristics

Imports

version

comdlg32

kernel32

msvcrt

shlwapi

user32

ole32

gdi32

comctl32

Sections

.text Size: 29KB - Virtual size: 29KB

.edata Size: 1024B - Virtual size: 582B

BSS Size: 68KB - Virtual size: 68KB

.text
Size: 29KB - Virtual size: 29KB

.edata
Size: 1024B - Virtual size: 582B

BSS
Size: 68KB - Virtual size: 68KB