64e26542550d546cb05cd7d1737b0518

General

Target

64e26542550d546cb05cd7d1737b0518
Size

156KB
MD5

64e26542550d546cb05cd7d1737b0518
SHA1

ccd22782b7d36060ec2c2124240a0bcfbdc14adb
SHA256

65b2c89cd5b8032c57a796ccaa4c9dcac129029d1b4eb0f29a4cdae52c1894d8
SHA512

4f564c05505d0d208518eea7dcc35e328e82caa8baba37bbbfa037bcdab7d4408af54e96980ed6f9ee668679b690bd427bce66b1bb2a91f715576949a551ce85
SSDEEP

768:tAQ0KXBK2frMJprKgvvQBW7kgaIskfTGm:tAKR7rMJpFnZ7rK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64e26542550d546cb05cd7d1737b0518

Files

64e26542550d546cb05cd7d1737b0518
.dll windows:4 windows x86 arch:x86

65d0bec895805ed0034d0999197a04b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
OpenProcess
CompareStringA
Process32First
CreateToolhelp32Snapshot
lstrcpyW
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
lstrcmpA
PulseEvent
lstrlenA
CloseHandle
RtlUnwind
ReadFile
GetProcessHeap
HeapAlloc
HeapFree

user32

ShowWindow
CharLowerA
GetClassInfoA
GetClientRect
SendMessageA
GetWindowLongA
SetWindowLongA
CreateWindowExA
UnregisterClassA
GetDesktopWindow
wsprintfW
LoadBitmapA
BeginPaint
EndPaint
CallWindowProcA
IsWindow
DestroyWindow
GetForegroundWindow
AnyPopup
RegisterClassA

gdi32

CreateCompatibleDC
SelectObject
DeleteDC
CreateFontA
DeleteObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString

msimg32

TransparentBlt

Sections

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rl
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ex_rsc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65d0bec895805ed0034d0999197a04b2

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msimg32

Sections

.data Size: 84KB - Virtual size: 84KB

.ex_cod Size: 8KB - Virtual size: 8KB

.ex_rl Size: 4KB - Virtual size: 4KB

.ex_rsc Size: 56KB - Virtual size: 56KB

.data
Size: 84KB - Virtual size: 84KB

.ex_cod
Size: 8KB - Virtual size: 8KB

.ex_rl
Size: 4KB - Virtual size: 4KB

.ex_rsc
Size: 56KB - Virtual size: 56KB