682a94592a54e73c14026b1400560cd8

General

Target

682a94592a54e73c14026b1400560cd8
Size

68KB
MD5

682a94592a54e73c14026b1400560cd8
SHA1

45173e621067d4a6d00f1a15c4f1eabab60687cc
SHA256

57e525eaa9008ec68083a803a345121b8dab01d10eeccb31daf933e14ea49c21
SHA512

039f930c027e01b81debbe59265c010d26d6de5aebdf8886d75394a04da86d1efe772ced4b2fbc179488e9a522b0d506ef6c5d988a7079aa7cf1003d6042e366
SSDEEP

768:0wyeJ3SQgnn3HOcdfhXmcg42eXuzfx7jDLSxP:x/3kn3OcdfNg0Xubxm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
682a94592a54e73c14026b1400560cd8

Files

682a94592a54e73c14026b1400560cd8
.exe windows:4 windows x86 arch:x86

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

lstrcatA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetWindowsDirectoryA
lstrcmpiA
DeleteFileA
TerminateProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
GetProcAddress
VirtualAlloc
LoadLibraryA
ReadFile
CreateFileA
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetFilePointer
HeapCreate
GetACP
GetOEMCP
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetLastError
RtlUnwind
WriteFile
HeapFree
CloseHandle

oleaut32

SysFreeString

ole32

CoUninitialize
CoInitialize
CoCreateInstance

user32

EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA

comctl32

ord17

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

48d4b927d18c3d1439a3e4044dae0950

Headers

File Characteristics

Imports

advapi32

kernel32

oleaut32

ole32

user32

comctl32

Sections

.text Size: 32KB - Virtual size: 29KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 16KB - Virtual size: 32KB

.text
Size: 32KB - Virtual size: 29KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 16KB - Virtual size: 32KB