67a41ee598bbaed96c1ef0387afecbdb

General

Target

67a41ee598bbaed96c1ef0387afecbdb
Size

37KB
MD5

67a41ee598bbaed96c1ef0387afecbdb
SHA1

6e6d99aff8553174b357758ceebdd6e9a4076c20
SHA256

e422c87d0e8a2468b1667fa4f2331911ca9f290ea42ac8f595f1f115cdc289e9
SHA512

0bfb7a9884240814f7b209b1bc68ead73a08d0dc9806485b5fbd1846fe6881fbd560937656d08c483c003888f90f5dc287c3733f3c20e138abc547a56414575a
SSDEEP

384:ghS4V+iFcs+s4CCE5B5Qx5CRbOFUtAOFsN1ChqOFw4GBhSBJEbwqD:gUi+JF/C5Ex5BFUFFsNeFVGPSBqnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67a41ee598bbaed96c1ef0387afecbdb

Files

67a41ee598bbaed96c1ef0387afecbdb
.exe windows:4 windows x86 arch:x86

0c01ab803c52b9e1ae38423d6e2b55c3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA
PathFileExistsA

kernel32

ReadFile
LoadLibraryExA
FreeLibrary
lstrcpynW
GlobalAlloc
lstrcpynA
GetPrivateProfileIntA
CloseHandle
SetFilePointer
GetPrivateProfileStringA
GetVolumeInformationW
SetErrorMode
GetDriveTypeW
lstrlenW
GetLogicalDrives
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
lstrcmpiA
lstrlenA
lstrcmpA
CreateFileA

user32

SetTimer
SendMessageA
PostQuitMessage
DestroyWindow
DispatchMessageA
GetMessageA
MessageBoxA
CreateWindowExA
RegisterClassA
RegisterWindowMessageA
CharNextA
CharNextW
DefWindowProcA
FindWindowA
GetWindowTextW
GetAsyncKeyState
SetForegroundWindow
CreatePopupMenu
GetCursorPos
SetMenuDefaultItem
InsertMenuItemA
EnableMenuItem
TrackPopupMenu
DestroyMenu
LoadImageA
DestroyIcon
LoadStringW
InsertMenuItemW

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA

shell32

Shell_NotifyIconW
ShellExecuteA
SHGetSpecialFolderPathA

nscrt

_vsnwprintf
_vsnprintf

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c01ab803c52b9e1ae38423d6e2b55c3

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

nscrt

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 10KB

.rsrc Size: 26KB - Virtual size: 25KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 10KB

.rsrc
Size: 26KB - Virtual size: 25KB