75b585f5f80a437f79613a564811a421

General

Target

75b585f5f80a437f79613a564811a421
Size

95KB
MD5

75b585f5f80a437f79613a564811a421
SHA1

d76e22e5b6e1798f6e82aa3403e0fdd600d9490b
SHA256

b797bc2d4a04e8888335cb0dc6fe4cfcc01d3307971309f64826f5a6b3985d14
SHA512

6dcca5e8ff313318bd7340800150e3ed75201cc07d3c3aa955d6389b8080969f22ddb6aa090306aec27d123952d913dd3052b5f6a50a16a1f5b2ab71103494f4
SSDEEP

1536:tWa02XXr7O2ALUWGnF8Aa7wf3otk1bPh52JvLrnpOho3v4LaAVXS2TmpNflk:waXqUWgspG17hcTpvKzVXziHlk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b585f5f80a437f79613a564811a421

Files

75b585f5f80a437f79613a564811a421
.exe windows:4 windows x86 arch:x86

db5f00467b96924a316203d3170e1f09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_DragLeave
ImageList_Read
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_Copy
ImageList_GetDragImage
ImageList_AddIcon
ImageList_GetIcon
ImageList_Replace
ImageList_Remove
ImageList_Merge

advapi32

RegCreateKeyExA
RegOpenKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueW
RegEnumKeyW
RegGetKeySecurity
RegQueryValueW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegReplaceKeyA
RegDeleteKeyW
RegLoadKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumValueW
RegFlushKey
RegLoadKeyW

user32

LoadMenuA
GetMenu
InsertMenuA
CloseWindow
DrawIconEx
GetDC
AppendMenuW
EndDialog
DrawIcon
CalcMenuBar
DrawTextW
IsMenu
AlignRects
GetWindowTextA
LoadCursorA
CopyImage

kernel32

GlobalFree
GetModuleHandleA
Sleep
SetLastError
lstrcmpiA
FreeLibrary
GetStringTypeA
GetFileAttributesA
WideCharToMultiByte
GetModuleFileNameA
lstrcmpA
HeapFree
GetStringTypeW
GetLastError
GetDateFormatA
GetCPInfo
GetCommandLineA
CloseHandle
GetFileSize
lstrcpynA

Sections

.IehZ
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.qwuH
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.OmaJcr
Size: 5KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LzByVm
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db5f00467b96924a316203d3170e1f09

Headers

File Characteristics

Imports

comctl32

advapi32

user32

kernel32

Sections

.IehZ Size: 14KB - Virtual size: 14KB

.qwuH Size: 68KB - Virtual size: 67KB

.OmaJcr Size: 5KB - Virtual size: 84KB

.LzByVm Size: 3KB - Virtual size: 2KB

.IehZ
Size: 14KB - Virtual size: 14KB

.qwuH
Size: 68KB - Virtual size: 67KB

.OmaJcr
Size: 5KB - Virtual size: 84KB

.LzByVm
Size: 3KB - Virtual size: 2KB