590d2a16497e808cf2c87bb50250ca1f

General

Target

590d2a16497e808cf2c87bb50250ca1f
Size

120KB
MD5

590d2a16497e808cf2c87bb50250ca1f
SHA1

b506dd9aaa6f2f9338339928db027079c5100734
SHA256

327900d48ff8630fb24a64c744cd0bff8f0151be6bdc40dd69cb0c3cb5617d91
SHA512

a02ad6d76e636de31c54023901ef33a736ef03878a2a9e885571d10a57db4b523f5a1d8e74ac92260a58ae4cbfd2fff28f1749903577aa835a2935f4bde8e6be
SSDEEP

3072:gWwyD7cFbEyEDgHFG1TvPsxgXgouPoEXoMmmRVQz:9BYFbE7glG1TvPNQv5XX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
590d2a16497e808cf2c87bb50250ca1f

Files

590d2a16497e808cf2c87bb50250ca1f
.exe windows:4 windows x86 arch:x86

ce848a704900319098e066aa2f376a46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA

gdi32

LineTo
SelectObject

user32

TranslateMDISysAccel
GetClipboardData
MapVirtualKeyA
GetSystemMenu
GetScrollInfo
EnableMenuItem
SetFocus
SetCapture
CallWindowProcA
DrawMenuBar
LoadBitmapA
CharLowerA
TranslateMessage
CharNextA
RemoveMenu
WaitMessage
IsCharLowerA
GetCursorPos
SetMenuItemInfoA
wsprintfA
IsWindowVisible
GetMenuItemInfoA
GetClassInfoA
DrawAnimatedRects
EnumThreadWindows
GetWindowTextLengthA
DrawIcon
GetSysColorBrush
GetWindowTextA
EnumWindows
GetWindowLongW
SetTimer
DispatchMessageW
SetClipboardData
GetMenuItemID
GetMenu
SendMessageA
IsRectEmpty
DrawEdge
IsMenu
CallNextHookEx
LoadIconA
MessageBoxA
CharUpperA
RegisterClipboardFormatA
MessageBeep
SetClassLongA
DefFrameProcA
IsWindowEnabled
GetSubMenu
DestroyWindow
GetDC
GetSystemMetrics
InvalidateRect
TrackPopupMenu
LoadKeyboardLayoutA
FillRect
GetMenuStringA
IsChild
SetScrollRange
GetWindowLongA
GetMenuItemCount
BeginPaint
FindWindowA
EqualRect
GetForegroundWindow
UnregisterClassA
RemovePropA
SetForegroundWindow
PeekMessageW
GetCursor

kernel32

GetFileType
GetLastError
GetCurrentThreadId
GetFullPathNameA
GetThreadLocale
LoadLibraryA
VirtualAlloc
GetFileSize

Exports

Exports

3stIhgB4n@24

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ce848a704900319098e066aa2f376a46

Headers

File Characteristics

Imports

advapi32

gdi32

user32

kernel32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 104KB - Virtual size: 243KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 104KB - Virtual size: 243KB

.rsrc
Size: 2KB - Virtual size: 1KB