867912a95ee0583783ad090dc943689d

General

Target

867912a95ee0583783ad090dc943689d
Size

166KB
MD5

867912a95ee0583783ad090dc943689d
SHA1

ea6b19cc90ee022fad100d71e6c7700ff430da3e
SHA256

eafe5a93b31c3d4d6b99be01712258c88d241feb66da918cf3306e4c3a9ea173
SHA512

0a6059fbdac9ea0055d93c875d4ed66bc1ea14323ce26009a83f52d59842f75876bedea85d4ec687af20a97d7d2551a017d8cc3cbfd91ce35512fbf95384322d
SSDEEP

3072:X9iShh+AEO9QLsUhS72u4QHC6U/b62aVYhU0IP+TJasLZR+mzArXU3:Xhhv9CsfXtGm2aYI8guf+wu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
867912a95ee0583783ad090dc943689d

Files

867912a95ee0583783ad090dc943689d
.exe windows:4 windows x86 arch:x86

64ee4523d043e59052c1dc38c9f7566e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRect
LoadIconA
GetDCEx
PtInRect
CharNextA
GetPropA
GetKeyNameTextA
GetDesktopWindow
SetWindowLongA
GetMenu
GetCursor
IsWindowEnabled
DestroyIcon
IsWindowUnicode
SetClipboardData
GetClassLongA
GetKeyState
FrameRect
GetCapture
MsgWaitForMultipleObjects
PeekMessageW
EnableScrollBar
CallNextHookEx
ShowScrollBar
GetMenuItemID
ChildWindowFromPoint
GetActiveWindow
GetWindowThreadProcessId

shell32

DragQueryFileA

comdlg32

GetOpenFileNameA
ChooseColorA
GetSaveFileNameA

gdi32

SetBkMode
GetCurrentPositionEx
SaveDC
SelectPalette
CreateCompatibleBitmap
CreateBitmap
GetDIBColorTable
CopyEnhMetaFileA

advapi32

RegCreateKeyA
RegEnumKeyA
GetLengthSid
RegCreateKeyExA

version

GetFileVersionInfoA

oleaut32

SysReAllocStringLen
SysAllocStringLen

ole32

CoGetContextToken
CreateBindCtx
CreateStreamOnHGlobal

kernel32

HeapAlloc
HeapDestroy
WideCharToMultiByte
ExitProcess
FreeLibrary
GetCurrentThread
lstrcpynA
VirtualQuery
GetStartupInfoA
FindClose
VirtualAllocEx
LoadLibraryExA
lstrcatA
VirtualAlloc
GetDiskFreeSpaceA
GlobalAddAtomA
GetProcAddress
GetModuleHandleA

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 131KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64ee4523d043e59052c1dc38c9f7566e

Headers

File Characteristics

Imports

user32

shell32

comdlg32

gdi32

advapi32

version

oleaut32

ole32

kernel32

Sections

.text Size: 30KB - Virtual size: 29KB

DATA Size: 131KB - Virtual size: 187KB

.idata Size: 3KB - Virtual size: 2KB

.text
Size: 30KB - Virtual size: 29KB

DATA
Size: 131KB - Virtual size: 187KB

.idata
Size: 3KB - Virtual size: 2KB