5ae0604cc4b44c052b0ccacb8324b971

Sharing

Copy URL Twitter E-mail

General

Target

5ae0604cc4b44c052b0ccacb8324b971
Size

104KB
MD5

5ae0604cc4b44c052b0ccacb8324b971
SHA1

46e37f568ab3954ab9f2fcf66388aa8152131a78
SHA256

342ae18d48661642c82ac974c1f7bea9a1738f690a74a291b58ee023e8a272bc
SHA512

661764a13f32b9ecdc8d094260be8ecc0d9fdaf50a171412b7b244cd6af54277a5adbc12bed7068999f1f368d50d052485d0aade6e53538bb929b7725e292929
SSDEEP

1536:RgwBy//6XDVSzjGzBzOnlefDItSlrROp+gnjHGbWasPLAHnF:24ynhSaYNlFObjSWrPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ae0604cc4b44c052b0ccacb8324b971

Files

5ae0604cc4b44c052b0ccacb8324b971
.exe windows:4 windows x86 arch:x86

6d04b37c10f73aab626798ce745dddc7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegOpenKeyExW
RegGetKeySecurity
RegEnumValueA
RegEnumKeyW
RegCreateKeyW
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyW
RegDeleteKeyW
RegQueryInfoKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExW
RegQueryValueExA
RegDeleteValueW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueW
RegLoadKeyW
RegLoadKeyA
RegDeleteValueA

kernel32

DeleteFileW
OpenFileMappingA
GetCommandLineA
CreateThread
OpenFile
GlobalFree
CopyFileW
GetStdHandle
GetFileTime
GetConsoleMode
ExitThread
GetLastError
CopyFileExW
FindAtomA
GetCPInfo
ReadFile
OpenFile
CopyFileExW
ReadConsoleA
DeleteAtom
ExitThread
DeleteFileA
GetCommandLineA
CreateThread
GetComputerNameA
GetFileSize
GetCPInfo
OpenFileMappingA
CreateProcessA
GlobalFree
CreateDirectoryA
GetLastError
FindFirstFileA
SetLastError
FindAtomA
WriteFile
DeleteFileW
GetCPInfo
DeleteFileW
GetLastError
DeleteAtom
CopyFileA
ExitThread
CreateProcessA
DeleteFileA
FindFirstFileA
CreateThread
CopyFileExA
OpenFile

user32

GetDC
DrawTextA
GetCursor
CopyImage
BlockInput
GetMenu
CreateIcon
LoadMenuA
DialogBoxParamA
GetFocus
AppendMenuW

comctl32

ImageList_Destroy
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Merge
ImageList_GetImageInfo
ImageList_Create
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_Remove
ImageList_DrawIndirect
ImageList_Replace
ImageList_LoadImageA
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
InitCommonControls
ImageList_BeginDrag
ImageList_Merge
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Remove
ImageList_AddIcon
ImageList_DragMove
ImageList_LoadImage
ImageList_DragEnter
ImageList_GetIconSize
ImageList_DragShowNolock

shell32

ExtractIconResInfoA
DragQueryFileA
SHDefExtractIconA
DragQueryFileW
CommandLineToArgvW
DragFinish
FreeIconList
DragQueryFileAorW
CheckEscapesW
ExtractIconA
ShellAboutA
RestartDialog
PathGetShortPath
ExtractIconExA
ExtractIconEx
CheckEscapesA

gdi32

BitBlt
GetCurrentPositionEx
CancelDC
SetTextColor
BeginPath
ClearBrushAttributes
ClearBitmapAttributes
GetBitmapBits
AddFontResourceExW
GetBrushOrgEx

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 57KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 214B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d04b37c10f73aab626798ce745dddc7

Headers

File Characteristics

Imports

advapi32

kernel32

user32

comctl32

shell32

gdi32

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 72KB - Virtual size: 72KB

.bbs Size: - Virtual size: 57KB

.idata Size: 4KB - Virtual size: 4KB

.tls Size: - Virtual size: 214B

.rdata Size: 512B - Virtual size: 265B

.rsrc Size: 1024B - Virtual size: 516B

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 72KB - Virtual size: 72KB

.bbs
Size: - Virtual size: 57KB

.idata
Size: 4KB - Virtual size: 4KB

.tls
Size: - Virtual size: 214B

.rdata
Size: 512B - Virtual size: 265B

.rsrc
Size: 1024B - Virtual size: 516B