730cba3bd8f3fdf4610735ec4f97a4fe

General

Target

730cba3bd8f3fdf4610735ec4f97a4fe
Size

184KB
MD5

730cba3bd8f3fdf4610735ec4f97a4fe
SHA1

40a4062800e6ed20182b46ef8ef05a9edf1869c6
SHA256

f044b71260fa9afea80065810b9b2c7a586d680944d27a3bcdf74f6cb2eab649
SHA512

ebc6e528e3f3d257fc29289846f48046e344f2c05eff57c937f30baa1c967ec5d8f330fa7f0fdb19e46cc472b9a61e1103dcb04023637ca45400266257ae076d
SSDEEP

3072:j1oHiM3M7M6Eqjnc+CzMqyvuPnzgfYJzFrH5c/st68KAjX5gjQvE:jqCPEVtzlLPn0fYLh6tAj2jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
730cba3bd8f3fdf4610735ec4f97a4fe

Files

730cba3bd8f3fdf4610735ec4f97a4fe
.exe windows:4 windows x86 arch:x86

a46cb4dc35b8e70b67247ca7307058d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

AlphaBlend
TransparentBlt

kernel32

GetEnvironmentStringsW
SetHandleCount
GetCPInfoExW
LeaveCriticalSection
GetFileType
FreeEnvironmentStringsA
GetTickCount
InterlockedIncrement
GetOEMCP
GetVersionExA
MultiByteToWideChar
RaiseException
GetStdHandle
TlsSetValue
GetCPInfo
HeapSize
EnterCriticalSection
GetEnvironmentStrings
EnumResourceTypesA
lstrlenW
GetLastError
InitializeCriticalSection
QueryPerformanceCounter
GetComputerNameW
WideCharToMultiByte
GetThreadLocale
GetLocaleInfoA
InterlockedExchange
GetACP
TlsGetValue
DeleteCriticalSection
FreeEnvironmentStringsW
WriteFile
UnhandledExceptionFilter
GetStartupInfoA
GetCurrentProcessId

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

gdi32

GetTextMetricsA
GetDeviceCaps
SelectObject
DeleteObject
GetTextExtentPointA
CreateFontIndirectA

ole32

CoGetMalloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc

Sections

.text
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a46cb4dc35b8e70b67247ca7307058d6

Headers

File Characteristics

Imports

msimg32

kernel32

shell32

newdev

gdi32

ole32

Sections

.text Size: 109KB - Virtual size: 109KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 70KB - Virtual size: 70KB

.reloc Size: 1024B - Virtual size: 124KB

.text
Size: 109KB - Virtual size: 109KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 70KB - Virtual size: 70KB

.reloc
Size: 1024B - Virtual size: 124KB