5858ca55d7dc1870e36a4012b443dbf7

Sharing

Copy URL

Twitter E-mail

General

Target

5858ca55d7dc1870e36a4012b443dbf7
Size

595KB
MD5

5858ca55d7dc1870e36a4012b443dbf7
SHA1

554bc6f85e848ade75aa435086bcaf037e28131c
SHA256

81805a3844ae037bdfadc7dbcdac69c625695f65cc264a81943e48fb4ba906a3
SHA512

2e09977db77818546863d672c0f0416388baedc95ffe5f43a909dd4cd96cecc356364b218a442c88e4763d691b09b8d70530e0aaadcb30306eca476d59b548a9
SSDEEP

12288:9kM7mT8y27tuJp0I/r/7BH56xQ8Qoh+tFtGc/qYjf:OMaAwJp9/bvtGc/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5858ca55d7dc1870e36a4012b443dbf7

Files

5858ca55d7dc1870e36a4012b443dbf7
.exe windows:4 windows x86 arch:x86

00f1858d896fae4ba349ca2f7f2c6ab9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

user32

GetMessageTime
IsWindowUnicode
WaitMessage
EnableMenuItem
GetClassInfoA
IsRectEmpty
GetWindowContextHelpId
DispatchMessageA
ValidateRgn
SetClassLongW
CreateWindowExA
InSendMessageEx
DdeAbandonTransaction
GetDC
FlashWindowEx
RegisterClassExA
IsWindow
EnumDisplayDevicesW
GetClipboardViewer
DestroyMenu
RegisterClassA
CharNextW
TrackPopupMenuEx

gdi32

Polyline
GetROP2

kernel32

GetCommandLineW
TlsSetValue
WriteConsoleA
GetProcAddress
EnterCriticalSection
CreateMutexA
HeapDestroy
lstrcpynW
GetConsoleMode
VirtualAlloc
SetStdHandle
SetEnvironmentVariableA
CreateFileA
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
HeapReAlloc
HeapCreate
CloseHandle
SetHandleCount
LoadLibraryA
LeaveCriticalSection
GetLocaleInfoW
SetFilePointer
InterlockedExchange
GetEnvironmentStringsW
FreeLibrary
Sleep
CompareStringW
GetConsoleCP
SetLastError
ReadFile
GetLocaleInfoA
WideCharToMultiByte
GetModuleHandleW
GetStdHandle
GetCommandLineA
WriteFile
GetUserDefaultLCID
VirtualQuery
SetThreadAffinityMask
TerminateProcess
EnumSystemLocalesA
TlsFree
IsDebuggerPresent
GetCurrentDirectoryW
GetFileType
IsValidLocale
GetStringTypeW
QueryPerformanceCounter
GetACP
CompareStringA
InterlockedDecrement
GetDiskFreeSpaceA
UnhandledExceptionFilter
MultiByteToWideChar
GetCPInfo
GetCurrentProcessId
DeleteCriticalSection
OpenMutexA
GetCurrentThreadId
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetStartupInfoA
SetConsoleCtrlHandler
TlsAlloc
FreeEnvironmentStringsW
InterlockedIncrement
TlsGetValue
GetCurrentProcess
GetTickCount
GetStartupInfoW
GetStringTypeA
GetDateFormatA
WriteConsoleW
SetEvent
GetSystemTimeAsFileTime
HeapSize
GetModuleFileNameW
VirtualFree
GetLastError
RtlUnwind
HeapAlloc
IsValidCodePage
SetUnhandledExceptionFilter
GetConsoleOutputCP
ExitProcess
FlushFileBuffers
HeapFree
GetTimeZoneInformation
GetCurrentThread
VirtualProtect
GetLogicalDriveStringsA
SetVolumeLabelA
GetOEMCP
GetModuleHandleA

Sections

.text
Size: 399KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00f1858d896fae4ba349ca2f7f2c6ab9

Headers

File Characteristics

Imports

comctl32

user32

gdi32

kernel32

Sections

.text Size: 399KB - Virtual size: 398KB

.rdata Size: 62KB - Virtual size: 66KB

.data Size: 110KB - Virtual size: 109KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 399KB - Virtual size: 398KB

.rdata
Size: 62KB - Virtual size: 66KB

.data
Size: 110KB - Virtual size: 109KB

.rsrc
Size: 23KB - Virtual size: 22KB