687880f513f2649f094ab4a39aa51d95

General

Target

687880f513f2649f094ab4a39aa51d95
Size

29KB
MD5

687880f513f2649f094ab4a39aa51d95
SHA1

d89f39f332e5ef6ea0314ca017dc9d76c9e2422e
SHA256

cf7464c7257adaddd1633386754c732cb9819cb79d3c150bfaedebdedcd2adcb
SHA512

355ba338c6a249bc3d4be2139f277441c34d54edf22099dd8206efb2e9696534c95c038675cad30a90115e9375baa02982bd9ab97515918eafef306f05591731
SSDEEP

768:8l2joQ5PwNaqUortPaFCjnyxVkzuYI0KkQrc8cCZRJM:wbRNaqUoJPzzyxazb9Cc4Z0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
687880f513f2649f094ab4a39aa51d95

Files

687880f513f2649f094ab4a39aa51d95
.dll windows:4 windows x86 arch:x86

7161a3783718c23a9fde855f5dbef493

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
CreateEventA
GetFileAttributesA
ReadFile
lstrcatA
MultiByteToWideChar
GetProcAddress
GlobalFree
OpenEventA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
lstrcpynA
GetSystemDefaultLCID
GetUserDefaultLCID
lstrlenA
LoadLibraryA
GetModuleFileNameA
GetSystemTimeAsFileTime
SetFilePointer
lstrcmpA
CreateFileA
WriteFile
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedExchange
HeapReAlloc
RtlUnwind
GetStringTypeA
GetLastError
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
WideCharToMultiByte
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
ExitProcess
TerminateProcess
GetCurrentProcess

user32

MessageBoxA
CallWindowProcA
EnableWindow
SetWindowTextA
IsWindowVisible
DestroyWindow
GetWindowRect
GetFocus
GetParent
wsprintfA
GetClientRect
SendMessageA
RegisterWindowMessageA
wsprintfW
SetWindowLongA
SetDlgItemTextA
GetWindowLongA
CreateWindowExA
GetDlgItem
ShowWindow
IsWindow
CreateWindowExW

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA

wininet

HttpOpenRequestA
InternetSetFilePointer
InternetOpenA
InternetConnectA
InternetCloseHandle

Exports

Exports

check
copy
run

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7161a3783718c23a9fde855f5dbef493

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB