78fa58554fa29d780f6602738ba6968f

Sharing

Copy URL Twitter E-mail

General

Target

78fa58554fa29d780f6602738ba6968f
Size

216KB
MD5

78fa58554fa29d780f6602738ba6968f
SHA1

139be5c78fb351d77e6ce65351e75217b2855c4d
SHA256

9d745defa93c6b172475c55b4c0c99e2d7e34393b81f6a9c05bdbc40550f30b4
SHA512

53e7396e3566cae28d720f37b2c21d31dfc76780fce25924bba9179122571b50cc31c245be9b489f3631a5c9e467a370c2f74a080a9649ce4e2bad96552988d5
SSDEEP

3072:2nQkSO7sPHS7+zENyikP8VRU7yZcy+4y+9hUL2pNF7PPW113YlMWpqcPSYlZpbNz:qp7GA+wNlVRUu0yq0DLU1s/pqoSA1sV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78fa58554fa29d780f6602738ba6968f

Files

78fa58554fa29d780f6602738ba6968f
.exe windows:4 windows x86 arch:x86

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteValueA
RegLoadKeyA

user32

MapWindowPoints
RedrawWindow
SendMessageA
ScrollWindow
PeekMessageA
RegisterWindowMessageA
LoadCursorA
LoadKeyboardLayoutA
OemToCharA
OpenClipboard
LoadBitmapA
PtInRect
RemoveMenu
OffsetRect
RegisterClassA
ScreenToClient
ReleaseDC
PeekMessageW
ReleaseCapture
RemovePropA
RegisterClipboardFormatA
SendMessageW
LoadStringA
MessageBoxA
MapVirtualKeyA
SetActiveWindow
PostQuitMessage
MessageBeep
LoadIconA
PostMessageA

gdi32

CreatePenIndirect
SetTextColor
GetBitmapBits
GetCurrentPositionEx
CreateFontIndirectA
CreatePalette
CreateDIBitmap

ole32

CoReleaseMarshalData
OleCreateStaticFromData

oleaut32

SysStringLen
RegisterTypeLib
SafeArrayCreate
VariantCopyInd
SafeArrayGetUBound

kernel32

LocalReAlloc
lstrcatA
lstrcmpA
lstrlenA
LoadLibraryA
GetCommandLineA
LocalAlloc
MoveFileExA
lstrcpynA
IsBadReadPtr
VirtualFree
GetLastError
ExitThread
lstrcmpiA
VirtualAlloc
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
WriteFile
LocalFree
SizeofResource
WaitForSingleObject
HeapDestroy
ExitProcess
lstrcpyA
GetProcAddress
VirtualQuery
MoveFileA
MulDiv
LoadLibraryExA

shlwapi

SHStrDupA
PathGetCharTypeA
PathIsContentTypeA
SHGetValueA
SHSetValueA
PathFileExistsA

shell32

SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetFolderPathA

comctl32

ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Read
ImageList_Add
ImageList_Destroy
ImageList_Draw
ImageList_Write
ImageList_Create
ImageList_DrawEx
ImageList_Remove

msvcrt

strlen
sqrt
tolower
wcsncmp
_acmdln
wcstol
malloc
time

version

GetFileVersionInfoA
VerFindFileA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc9
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc8
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e88ba0512c5cc14fcbaf0c216a1661f6

Headers

File Characteristics

Imports

advapi32

user32

gdi32

ole32

oleaut32

kernel32

shlwapi

shell32

comctl32

msvcrt

version

Sections

.text Size: 74KB - Virtual size: 73KB

.data Size: 1KB - Virtual size: 1KB

.rsrc9 Size: 1024B - Virtual size: 654B

.rsrc2 Size: 2KB - Virtual size: 1KB

.rsrc8 Size: 1KB - Virtual size: 1KB

.rsrc4 Size: 4KB - Virtual size: 4KB

.rsrc0 Size: 129KB - Virtual size: 128KB

.rsrc Size: 1024B - Virtual size: 976B

.text
Size: 74KB - Virtual size: 73KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc9
Size: 1024B - Virtual size: 654B

.rsrc2
Size: 2KB - Virtual size: 1KB

.rsrc8
Size: 1KB - Virtual size: 1KB

.rsrc4
Size: 4KB - Virtual size: 4KB

.rsrc0
Size: 129KB - Virtual size: 128KB

.rsrc
Size: 1024B - Virtual size: 976B