75f26a0a9685bc049e0c050022dfb610

General

Target

75f26a0a9685bc049e0c050022dfb610
Size

185KB
MD5

75f26a0a9685bc049e0c050022dfb610
SHA1

b0545ce82588ab361b9a84399394285dd895b347
SHA256

e892e5fb59c29bf784872ef650d7d4a56640e9def3a59dbd86260981632167aa
SHA512

25635a237ef82f588975bce462919761494682b8ca8faccb08578317b3f552c16a8be9cfa378c6afe4b5a732b81ddba050421122b73b73c97eabb5d93a27e1bc
SSDEEP

3072:mdgwdN3lgAaLaRMn6e4swtF/vcl8X4spcUAqq1fUIRGlj0jUw2I5rc3Raa9:RY3iAaL0cEt9cXspHFyVGlm2Ia3Raa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75f26a0a9685bc049e0c050022dfb610

Files

75f26a0a9685bc049e0c050022dfb610
.exe windows:4 windows x86 arch:x86

6ceb8d88e92d4280a5171993febccdb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetClassLongA
MessageBoxW

shell32

SHFileOperationW
SHCreateDirectoryExW
SHGetFolderPathW

kernel32

InitializeCriticalSection
GetModuleFileNameW
EnterCriticalSection
GetThreadPriority
SetUnhandledExceptionFilter
GetLocaleInfoW
IsValidLocale
CloseHandle
GetCurrentProcess
ExitProcess
LeaveCriticalSection
GetCurrentDirectoryW
TerminateProcess
SetEndOfFile
SetCommConfig
GetModuleHandleA
Sleep
GetCommandLineA
GetUserDefaultLCID
SetStdHandle
WriteFile
HeapFree
DeleteCriticalSection
GetVersionExA
GlobalAlloc
EnumResourceNamesA
LCMapStringW
GetCurrentThreadId
UnhandledExceptionFilter
RaiseException
InterlockedIncrement
GetLastError
WriteConsoleA
MultiByteToWideChar
CreateFileA
GetProcAddress
ExitProcess
LCMapStringA
GetConsoleOutputCP
EnumSystemLocalesA
GetProcessHeap
HeapReAlloc
RtlUnwind
IsDebuggerPresent
HeapAlloc
GetFullPathNameW
WriteConsoleW
ReadFile
WideCharToMultiByte
HeapSize
GetCPInfo
InterlockedDecrement
IsValidCodePage
GetFullPathNameA

rpcrt4

UuidCreate

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

ole32

CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoSetProxyBlanket

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ceb8d88e92d4280a5171993febccdb0

Headers

File Characteristics

Imports

user32

shell32

kernel32

rpcrt4

advapi32

ole32

Sections

.text Size: 159KB - Virtual size: 159KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 21KB

.crt Size: 512B - Virtual size: 216KB

.text
Size: 159KB - Virtual size: 159KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 21KB

.crt
Size: 512B - Virtual size: 216KB