896e9a821bde9714ee70e1fc41337f52

General

Target

896e9a821bde9714ee70e1fc41337f52
Size

286KB
MD5

896e9a821bde9714ee70e1fc41337f52
SHA1

75b48a76255521903c4006b196440fe410caba9a
SHA256

808b9e3c5f09f57e334bd918d2f638fc8dc3509cde6b55eb1324cc298fa63d20
SHA512

0175adbeb828574690441a31fc185f36ba70d51b0350b91d3111e2d4c8410a188c40c076de7ae368215dd83b8a60203c5334cbb55d6021ce6d83914d7cd9efea
SSDEEP

6144:l2HlG0GTiZ4xaDqXWJIJHqSOIxnAtkAeVyCjawyOZyR:o8FTiZ4RXWJ4qSOIxu+sKyR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896e9a821bde9714ee70e1fc41337f52

Files

896e9a821bde9714ee70e1fc41337f52
.exe windows:4 windows x86 arch:x86

3585adf62e38dfe6c4d304ea206902f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsFileSpecA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathCreateFromUrlW

oleacc

CreateStdAccessibleObject

kernel32

GetCurrentProcess
InterlockedDecrement
FormatMessageW
SetLastError
MulDiv
TlsAlloc
FindAtomW
lstrlenW
GlobalHandle
RaiseException
LeaveCriticalSection
InterlockedIncrement
GetComputerNameW
TlsFree
GlobalLock
GetCurrentThreadId
WaitForSingleObject
InterlockedExchange
LocalAlloc
EnumResourceNamesA
CreateFileW
GlobalUnlock
HeapSetInformation
TlsSetValue
GlobalFree
SetUnhandledExceptionFilter
InitializeCriticalSection
GetTickCount
FlushInstructionCache
GetStringTypeA
GetLocaleInfoW
SetLastError
CloseHandle
TlsGetValue
lstrcmpW
GetOEMCP
lstrlenA
GlobalAlloc
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte

Sections

.text
Size: 145KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3585adf62e38dfe6c4d304ea206902f4

Headers

File Characteristics

Imports

shell32

shlwapi

oleacc

kernel32

Sections

.text Size: 145KB - Virtual size: 276KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 138KB - Virtual size: 137KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 145KB - Virtual size: 276KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 138KB - Virtual size: 137KB

.rsrc
Size: 512B - Virtual size: 4KB