801290e13c5d04229500f70c8a496bd5

General

Target

801290e13c5d04229500f70c8a496bd5
Size

88KB
MD5

801290e13c5d04229500f70c8a496bd5
SHA1

060d63e155056e178c0b3e8c4decafed941d7636
SHA256

dbd2d740a63f7a1d62aa2fa4acaa8f4a87a2902a7c816c3768259f5d3f5c8786
SHA512

f1b7412333ba21bc99cb8aecbcaf7e6933bd6dc643ce274d03eeb8a959de9e5a01135f40692633a977bd8caaeb384ba9d549f5b665c9dd834f6479e50f9da587
SSDEEP

1536:4orz/fZpL5XkOkk0PKFf3DKVn4JhFH06e1v9aLJb72mjJ6c8YX:44kS0PKFLKxIDH06QaLJTpX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
801290e13c5d04229500f70c8a496bd5

Files

801290e13c5d04229500f70c8a496bd5
.exe windows:1 windows x86 arch:x86

58ced485884ce404529446f46c92907b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetTickCount
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

BuildSecurityDescriptorA
GetPrivateObjectSecurity
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
SetTokenInformation

user32

AppendMenuA
BeginPaint
BlockInput
ClipCursor
EndDialog
EqualRect
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
SetCaretPos
ShowCaret
SwitchDesktop
TrackMouseEvent
UpdateWindow

Sections

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58ced485884ce404529446f46c92907b

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 80KB - Virtual size: 80KB

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.flat Size: 512B - Virtual size: 88B

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 80KB

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.flat
Size: 512B - Virtual size: 88B

.rsrc
Size: 1KB - Virtual size: 1KB