5bd13e49aeebd05972dde99a32663381

General

Target

5bd13e49aeebd05972dde99a32663381
Size

125KB
MD5

5bd13e49aeebd05972dde99a32663381
SHA1

df9ba20cccdcc2130405584d9ae595fdf38959af
SHA256

817d1641c1db76bac38f536f021604759c0c2c8b6a1c9780199bc467f49d658f
SHA512

f3a03b8b634b82f737daacea8f6f7052fe6700bdd0afda63d0b8b35bd8d4a14c423b25434b36bbeb21132fe697dc5871ab5071953a860b98ab81064ac0a0dc7c
SSDEEP

3072:U3kKtoN1apKmLizhmVlytKCdSEwlVGhhs+rAxP7SpZ:UO1qJQKly0CdSEIM5Ax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bd13e49aeebd05972dde99a32663381

Files

5bd13e49aeebd05972dde99a32663381
.exe windows:4 windows x86 arch:x86

ae0ecdbccd8f13d9bedbde455bc269d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayCreate
VariantCopyInd
SysAllocStringLen
SysFreeString

advapi32

RegQueryValueA
RegOpenKeyExA

shell32

DragQueryFileA
SHGetDesktopFolder
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHFileOperationA

comctl32

ImageList_Destroy
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_Remove
ImageList_Draw
ImageList_DrawEx
ImageList_Write
ImageList_Create
ImageList_GetBkColor

kernel32

GetUserDefaultLCID
GlobalAddAtomA
GetModuleHandleA
GetProcAddress
IsBadReadPtr
GetCommandLineA
GetCurrentThread
GetCommandLineW
LockResource
LoadLibraryExA
GetSystemDefaultLangID
GetModuleHandleW
ExitThread
GetACP
VirtualAllocEx
ExitProcess

gdi32

CreateBrushIndirect
SetBkColor
GetClipBox
CreateCompatibleDC

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae0ecdbccd8f13d9bedbde455bc269d8

Headers

File Characteristics

Imports

oleaut32

advapi32

shell32

comctl32

kernel32

gdi32

Sections

CODE Size: 37KB - Virtual size: 36KB

.rdata Size: 67KB - Virtual size: 66KB

.data Size: 10KB - Virtual size: 9KB

BSS Size: 1024B - Virtual size: 676B

.rsrc Size: 9KB - Virtual size: 8KB

CODE
Size: 37KB - Virtual size: 36KB

.rdata
Size: 67KB - Virtual size: 66KB

.data
Size: 10KB - Virtual size: 9KB

BSS
Size: 1024B - Virtual size: 676B

.rsrc
Size: 9KB - Virtual size: 8KB