58ab945ce5942cca0e8166cb362bc487

General

Target

58ab945ce5942cca0e8166cb362bc487
Size

47KB
MD5

58ab945ce5942cca0e8166cb362bc487
SHA1

0f923a70ff310a155ecde1ced844c17e55cc8fbd
SHA256

3fb5fa24d2676bf4b11abd1951ec7d38707def3b31e64e16b6c6ced230e57b79
SHA512

56befb6cf5973813ddea962d41e1d276bca66db56b7b52d484ecdded52b24371245b9dd8d24a6072e4c70e1f167e4ae22d062dc06684b5c09fbce0e99a97e18f
SSDEEP

768:i8GjvD2JJIBAg+0vKOSjLeu0dO+XBNGOR22ocVrxDok2IkWV0VfAu7+P6XXl72LT:i88rbdiLjLeu00UHGOAzKNDNaCSXl2lp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58ab945ce5942cca0e8166cb362bc487

Files

58ab945ce5942cca0e8166cb362bc487
.exe windows:5 windows x86 arch:x86

2058177b205944beee4c9f27d7b5bbdc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
FreeEnvironmentStringsA
GlobalAlloc
GetCurrentDirectoryA
SetLastError
DeleteCriticalSection
GetTickCount
GetFileAttributesA
GetLastError
FindResourceA
CreateThread
GetProcessAffinityMask
GetExitCodeThread
GetVersionExA
GetStdHandle
GetConsoleMode

gdi32

GetStockObject
CreateRectRgn
MoveToEx
CreateSolidBrush
SelectClipRgn
Ellipse
ExtTextOutA
RectInRegion
EndPage
LineTo

msvcrt

memmove
wcslen
atoi
strcspn
_beginthread
_acmdln
_vsnwprintf
_adjust_fdiv
_initterm
_pctype
__p__fmode

user32

InsertMenuA
GetMenu
RegisterWindowMessageA
WindowFromPoint
SetWindowPos
PeekMessageA
GetWindowTextA
IsDialogMessageA
UpdateWindow
GetSysColor
DrawTextA

advapi32

SetKernelObjectSecurity
RegCreateKeyA
GetSidIdentifierAuthority
CloseServiceHandle
GetSecurityInfo
ControlService
MapGenericMask
GetSidSubAuthority

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2058177b205944beee4c9f27d7b5bbdc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

msvcrt

user32

advapi32

Sections

.text Size: 43KB - Virtual size: 43KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 269B

.text
Size: 43KB - Virtual size: 43KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 269B