5c1ec3607019d3af63df64db7f6dfde8

General

Target

5c1ec3607019d3af63df64db7f6dfde8
Size

69KB
MD5

5c1ec3607019d3af63df64db7f6dfde8
SHA1

5f1b299a28b8f29246b362f57d239d3314b76d39
SHA256

1b882d4c1812ceac3d98cdacb6b1221ef0f47f9f3cffd8ae7ccdf28d13e10ff9
SHA512

f132b2b1587003aa496dc3ef85e2feb5b4fa15113f51c48c3d1fd97b6bbdb8e098254a30190d0f817606e9b4af10e63f9203fc27b3829eb55a76d14fceb7a23e
SSDEEP

1536:PzmqoVINf7toTUsBOa7HE4CZ4iJ9G3oOQGRi2Rz4qGVCdx:bwVI95ozBOa7/CZfJMpQGRj4edx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c1ec3607019d3af63df64db7f6dfde8

Files

5c1ec3607019d3af63df64db7f6dfde8
.exe windows:4 windows x86 arch:x86

8c7f173ac852309cd9dfed6623563b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
SetForegroundWindow
LoadBitmapA
EnumDisplayMonitors
MessageBoxW
UnregisterClassA
DefWindowProcA
EndPaint
SetWindowLongA
CreateWindowExA
GetWindowLongA
GetSystemMetrics
SystemParametersInfoA
LoadStringW
MessageBoxA
CharNextA
GetDesktopWindow
LoadImageA
GetDC
UpdateWindow
LoadIconA
RegisterClassA

advapi32

RegQueryValueExA
CryptReleaseContext
RegDeleteValueA
RegDeleteKeyA
CryptDestroyKey
RegDeleteKeyW
RegDeleteValueW
CryptDestroyHash
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
RegEnumValueW
CryptImportKey
RegSetValueExW
CryptVerifySignatureA
CryptAcquireContextA
RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
CryptHashData
CryptCreateHash

gdi32

DeleteDC
CreateDIBitmap
CreatePalette
CreateCompatibleDC
SelectObject
SelectPalette
SetBkMode
GetDeviceCaps
CreateFontIndirectA
GetTextExtentPoint32A
TextOutW
SetTextColor
DeleteObject
GetObjectA
BitBlt
RealizePalette

kernel32

GetProcAddress
FreeResource
CompareFileTime
GetModuleFileNameA
MultiByteToWideChar
GetFileSize
FindAtomW
LockResource
InterlockedExchange
GetModuleHandleA
WideCharToMultiByte
GetVersion
LoadLibraryW
GlobalAlloc
LoadLibraryA
VirtualAlloc
HeapFree
LocalFree
GetEnvironmentVariableA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c7f173ac852309cd9dfed6623563b76

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

gdi32

kernel32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 18KB - Virtual size: 18KB

.rsrc Size: 1KB - Virtual size: 13KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 18KB - Virtual size: 18KB

.rsrc
Size: 1KB - Virtual size: 13KB