65fa33b8b205c6441fc25c5393705695

General

Target

65fa33b8b205c6441fc25c5393705695
Size

48KB
MD5

65fa33b8b205c6441fc25c5393705695
SHA1

68f7c36172ce921fccfa03a0532398fe1372e9d1
SHA256

5ff45f4cb419071a30d7c6c4ae388733895db0831b730a7460732e0d64dd83be
SHA512

5c57bdbac4c093c1b5ee03ea34270c5f777c02acb9fadd24368c7d42884982b3b0cb42d229fbba22e04abdc3c1a2687d484ca13399a16d356eee4363cc9ec984
SSDEEP

768:/yWflTh/JaW4TJaanEDloTJHfs5eHPFLAOfM3f65Wqvfeu7BS4ixidHnV:jflTFJazT8anrdUQ9Aogf6zvfek0wdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65fa33b8b205c6441fc25c5393705695

Files

65fa33b8b205c6441fc25c5393705695
.exe windows:4 windows x86 arch:x86

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynA
GetCurrentProcess
CreateFileA
SetHandleCount
GetFileType
lstrcpyA
lstrcpynW
GetStringTypeW
SetFilePointer
MultiByteToWideChar
GetStartupInfoA
GetStringTypeA
LCMapStringA
TerminateProcess
GetStdHandle
LCMapStringW
GetVersion
GetOEMCP
lstrcatA
WriteFile
GetCommandLineA
GetCPInfo

user32

DrawIcon
CopyImage
CopyRect
LoadCursorA
GetDC
IsWindow
DialogBoxParamA
DialogBoxParamW
CopyIcon
CreateIcon
DrawTextW
GetFocus
DrawIconEx
CloseWindow
IsMenu
GetCursor
LoadMenuA
GetDlgItem
DrawTextA
GetWindowTextLengthA
EndDialog
InsertMenuA
GetWindowTextA

comctl32

ImageList_LoadImageW
MenuHelp
CreateUpDownControl
CreateToolbarEx
ImageList_GetIconSize
ImageList_AddIcon
ImageList_Copy
DllGetVersion
InitCommonControls
ImageList_DragEnter
DrawStatusText
ImageList_Add

advapi32

RegCreateKeyW
RegCreateKeyExA
RegOpenKeyA
RegSetValueA
RegQueryValueExW
RegDeleteKeyW
RegQueryValueExA
RegOpenKeyW
RegEnumValueA
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyA
RegSetValueW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 17.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d841aae054b9c40b9aa094c7eea57f7c

Headers

File Characteristics

Imports

kernel32

user32

comctl32

advapi32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 42KB - Virtual size: 17.5MB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 42KB - Virtual size: 17.5MB