a1d5fd7bc00fe91e89aa1f29922b99fc

Sharing

Copy URL Twitter E-mail

General

Target

a1d5fd7bc00fe91e89aa1f29922b99fc
Size

63KB
MD5

a1d5fd7bc00fe91e89aa1f29922b99fc
SHA1

58433f27398774e6d507b1cadd735dd5cf4c597f
SHA256

84649c431a576476aacbb30b7da4e773d63b84be825d619d6bc031170782df9f
SHA512

07d4bd85392377bf6ffae01c97dc294daace7bf72f57f33dc165dc6e0a7003eb0991529baa9ff0947e8ecb4bff4789138a6131d9424d5968d95cc05d0ed1c654
SSDEEP

1536:xd5Z5JdS3zqt3rRG19PpF1mjIN3RhV+9W4ye:1vJGObRA9Vbn/Re

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d5fd7bc00fe91e89aa1f29922b99fc

Files

a1d5fd7bc00fe91e89aa1f29922b99fc
.exe windows:4 windows x86 arch:x86

7010cc584e92e70f960e7a8feef36e78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIcon
ImageList_LoadImageW
ImageList_DragLeave
ImageList_Create
InitCommonControls
ImageList_ReplaceIcon
ImageList_Read
ImageList_AddIcon
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_Destroy
ImageList_DrawEx
ImageList_Copy
ImageList_LoadImageA
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_Remove
ImageList_DragLeave
ImageList_DragMove
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Draw
ImageList_LoadImage
ImageList_EndDrag
ImageList_GetIcon
ImageList_Read
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetImageInfo
ImageList_GetImageRect
ImageList_EndDrag
ImageList_AddIcon
ImageList_DrawIndirect
ImageList_Merge
ImageList_Read
ImageList_GetIcon
ImageList_GetDragImage
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_DragEnter
ImageList_GetImageCount
ImageList_Copy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_BeginDrag
ImageList_DragMove
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_DragMove
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Destroy
ImageList_Read
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_Draw
ImageList_AddIcon
ImageList_LoadImage
ImageList_DragLeave
ImageList_BeginDrag
ImageList_Merge
InitCommonControls
ImageList_GetDragImage
ImageList_Destroy
ImageList_Copy
ImageList_Replace
ImageList_GetImageInfo
ImageList_Create
ImageList_LoadImageA
ImageList_Remove
ImageList_Merge
ImageList_Read
ImageList_GetImageCount
ImageList_AddIcon
ImageList_GetIconSize
ImageList_LoadImage
ImageList_GetIcon
ImageList_DragMove

gdi32

AddFontResourceTracking
AbortPath
ClearBrushAttributes
RestoreDC
GetBrushOrgEx
DeleteObject
BitBlt
ExcludeClipRect
AddFontResourceExW
AddFontResourceExA
CancelDC
DeleteDC
GetClipBox
CreateSolidBrush
CloseMetaFile
BeginPath
ExtTextOutA
GetDCOrgEx
ClearBrushAttributes
CreateSolidBrush
GetBitmapBits
AddFontResourceExW
CancelDC
DeleteObject
AbortPath
GetBrushOrgEx
AddFontResourceW
SetTextColor
CopyMetaFileA
GetPixel
DeleteDC
ClearBitmapAttributes
ExtTextOutA
GetPixel

user32

InsertMenuA
DrawIconEx
IsWindow
AppendMenuW
AlignRects
DialogBoxParamW
DrawIcon
DrawTextW
GetMenu
LoadMenuA
CreateIcon
GetDlgItem
CopyIcon
DrawTextA
EndDialog
BlockInput
CloseWindow
CopyImage
IsMenu

kernel32

GetComputerNameA
CreateDirectoryA
CreateProcessA
WriteFile
SetLastError
ReadConsoleA
GetLastError
DeleteFileW
FindFirstFileA
CreateThread
DeleteAtom
GetFileSize
GetCPInfo
GetConsoleMode
OpenFile
GetFileTime
GlobalFree
GetStdHandle
CopyFileA
OpenFileMappingA
CopyFileExW
ExitThread
CopyFileExA
FindAtomA

advapi32

RegGetKeySecurity
RegEnumKeyW
RegReplaceKeyA
RegReplaceKeyW
RegQueryValueExW
RegQueryValueW
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExW
RegLoadKeyA
RegEnumKeyA
RegQueryValueExA
RegLoadKeyW
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegFlushKey
RegEnumValueW
RegOpenKeyW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 811B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7010cc584e92e70f960e7a8feef36e78

Headers

File Characteristics

Imports

comctl32

gdi32

user32

kernel32

advapi32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 53KB - Virtual size: 145KB

.rsrc Size: 1024B - Virtual size: 811B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 53KB - Virtual size: 145KB

.rsrc
Size: 1024B - Virtual size: 811B