71ad46efcdd429862f5d4699cdff5a39

Sharing

Copy URL Twitter E-mail

General

Target

71ad46efcdd429862f5d4699cdff5a39
Size

175KB
MD5

71ad46efcdd429862f5d4699cdff5a39
SHA1

487068e1d2b6f2cc1f1f1c440a29c0b0e8e21c96
SHA256

bdcb939ef09d9e7a56ffafd6986a684ec351c8bdcd162f78b32a0022276a04be
SHA512

3f8c6012b260f288c8084876185451edd59c7ee2fa4214a2d9d1018868b718e10a5375de8f6cef959e5fd17d252063eff91d1d001e80a97a00d393ecba98573f
SSDEEP

3072:LvKSIDFKq51MpUR6vwPH2c3C9X74hnHZj1r60Iv:DKlHp6vdZ725pk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71ad46efcdd429862f5d4699cdff5a39

Files

71ad46efcdd429862f5d4699cdff5a39
.exe windows:4 windows x86 arch:x86

579ebf19ae5be5446a8901715bad74c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegQueryValueExA
RegEnumKeyA
RegLoadKeyA

gdi32

SelectPalette
SetPixel
RestoreDC
CreateBitmap
CreateCompatibleDC
SetTextColor
SelectObject
CreateFontIndirectA
GetDCOrgEx
GetDIBColorTable

shlwapi

SHGetValueA
SHDeleteValueA
SHStrDupA

user32

FindWindowA
InsertMenuA
GetMenuItemCount
GetCapture
GetSysColor
WindowFromPoint
GetTopWindow
GetScrollInfo
CreatePopupMenu
DrawAnimatedRects
GetMenuItemInfoA
SetClassLongA
UpdateWindow
GetCursor
TranslateMDISysAccel
SetWindowPlacement
LoadStringA
FrameRect
InflateRect
ReleaseDC
DefMDIChildProcA
GetSubMenu
UnhookWindowsHookEx
OemToCharA
GetDesktopWindow
MsgWaitForMultipleObjects
EnumChildWindows
GetFocus
WaitMessage
DefWindowProcA
TrackPopupMenu
IsWindowUnicode
SetScrollInfo
IsWindowVisible
DispatchMessageW

ole32

CLSIDFromProgID
CoCreateGuid
CoGetObjectContext
StgCreateDocfileOnILockBytes
CoGetMalloc

version

GetFileVersionInfoA
VerQueryValueA
VerInstallFileA

kernel32

SetEndOfFile
GetOEMCP
GlobalAddAtomA
FindFirstFileA
GetProcAddress
GetModuleHandleA
GetLocaleInfoA
GetModuleFileNameA
VirtualAlloc
GetThreadLocale
lstrcmpiA
GetVersionExA
ExitProcess
VirtualAllocEx
GlobalAlloc
GetCurrentThread
GetLastError

shell32

SHFileOperationA
DragQueryFileA

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

579ebf19ae5be5446a8901715bad74c7

Headers

File Characteristics

Imports

advapi32

gdi32

shlwapi

user32

ole32

version

kernel32

shell32

Sections

CODE Size: 29KB - Virtual size: 29KB

.data Size: 140KB - Virtual size: 207KB

DATA Size: 4KB - Virtual size: 4KB

CODE
Size: 29KB - Virtual size: 29KB

.data
Size: 140KB - Virtual size: 207KB

DATA
Size: 4KB - Virtual size: 4KB