5b15fc64c3baabd2eed325b7fa993f34

General

Target

5b15fc64c3baabd2eed325b7fa993f34
Size

60KB
MD5

5b15fc64c3baabd2eed325b7fa993f34
SHA1

62e5c527899571366ee1e2c67dd04520f9262500
SHA256

55c1384a1ec42a14c5547a1206ca69bd672966d11b7e684f401bd2aa505ecc88
SHA512

f362b2e43860c9362e77c99fbefaf76ad57d44b7db7751a40995d79f2891050d7388ca4d4f80cbddc3efecb920b149f881915ca800fd7adf8706d281e3b3c986
SSDEEP

1536:Sf+W/eZQOLJAeRfK3PJqLsKcU8E2knWkPW8WireKt/qkXW:SdciJKceLhqKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b15fc64c3baabd2eed325b7fa993f34

Files

5b15fc64c3baabd2eed325b7fa993f34
.exe windows:4 windows x86 arch:x86

129caba1248fea1ea06dfb4cdf6fe5a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
WritePrivateProfileStringW
GlobalAlloc
LoadLibraryA
GetLogicalDrives
GetVersion
CancelWaitableTimer
GetProcAddress
GetCurrentThreadId
InterlockedDecrement
GetFileAttributesExW
GetModuleFileNameW
GlobalUnlock
MultiByteToWideChar
ReadFile
InterlockedIncrement
LoadLibraryW
DeleteFileW
ResumeThread
CreateWaitableTimerW
GetSystemTime
TerminateThread
GetDriveTypeW

user32

GetWindowThreadProcessId
SetCursorPos
LoadCursorW
LoadStringW
DestroyIcon
SetCursor
GetWindowDC
GetCursorPos
ReleaseDC
RegisterWindowMessageW
IsDlgButtonChecked
DestroyMenu
CreatePopupMenu
AppendMenuW
wsprintfW
PostMessageW
FillRect
DialogBoxParamW
SystemParametersInfoW
InvalidateRect
MessageBoxW
RedrawWindow

gdi32

CreatePen
SetBkColor
GetClipBox
GetStockObject
SetTextColor
GetMapMode
DeleteObject
CreateRoundRectRgn

advapi32

RegCloseKey
SetSecurityDescriptorDacl
LookupAccountSidW
RegSetValueExW
RegNotifyChangeKeyValue

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

129caba1248fea1ea06dfb4cdf6fe5a8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB