a237e2119e777bae06c99de65bc71ae8

Sharing

Copy URL Twitter E-mail

General

Target

a237e2119e777bae06c99de65bc71ae8
Size

163KB
MD5

a237e2119e777bae06c99de65bc71ae8
SHA1

5653c0fdf816bd98aa509bd482138fcdb94aa949
SHA256

40f7a18f3ee0e525469abc54c61e5d8ec2f6d6b3487b7fc142495daaa1203a81
SHA512

ea9b59a1c6c5c774a6654f7acf17964264300fb8e4a28350409e62c82610e917b89dbb45825b37d876ac08d17fce539446deb2ce3db1a75d73cb9f2c48f047c0
SSDEEP

3072:xApm7jHzqPGaIwEkZFa5Hl6dczUNWCGFTAOKDux8R9e+w:t6GLm05F6dczkWJF0OKSSTez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Cd_label_designer_4_keygen_by_ViKiNG.exe

Files

a237e2119e777bae06c99de65bc71ae8
.zip
Cd_label_designer_4_keygen_by_ViKiNG.exe
.exe windows:4 windows x86 arch:x86

959d9a4e7a0449b1064c67dd7a43bf1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW

kernel32

GetWindowsDirectoryA
CloseHandle
DeviceIoControl
FindFirstFileW
CreateFileA
ReadFile
SetFilePointer
GetLastError
GetVersionExA
WriteFile
GetSystemDirectoryA
QueryDosDeviceA
GetDriveTypeA
WaitForMultipleObjectsEx
SetWaitableTimer
CreateWaitableTimerA
CreateThread
InterlockedExchange
GetACP
GetLocaleInfoA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
CreateMutexA
ReleaseMutex
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
SetEvent
SuspendThread
ResumeThread
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
LeaveCriticalSection
EnterCriticalSection
GetOverlappedResult
DisconnectNamedPipe
ConnectNamedPipe
CreateEventA
OpenProcess
WaitForSingleObject
CreateNamedPipeA
GetTempPathA
GetCurrentProcessId
SetLastError
LocalFree
Sleep
OpenMutexA
GetLocalTime
GetTickCount
GetCurrentThreadId
GetFileAttributesA
GetFileAttributesExA
DeleteFileA
RemoveDirectoryA
MoveFileA
InterlockedCompareExchange
FormatMessageA
InterlockedDecrement
InterlockedIncrement
RtlUnwind
ExitProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleHandleA
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
QueryPerformanceCounter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetOEMCP
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage

winmm

timeGetDevCaps
timeEndPeriod
timeBeginPeriod
timeGetTime

crypt32

CertVerifyCertificateChainPolicy

setupapi

SetupIterateCabinetW

oleaut32

SysReAllocStringLen
SafeArrayGetRecordInfo
VarFormatFromTokens
GetErrorInfo

Sections

.text
Size: 94KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FILE_ID.DIZ
ViKiNG.nfo

Sharing

General

Malware Config

Signatures

Files

959d9a4e7a0449b1064c67dd7a43bf1e

Headers

File Characteristics

Imports

advapi32

kernel32

winmm

crypt32

setupapi

oleaut32

Sections

.text Size: 94KB - Virtual size: 133KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 76KB - Virtual size: 75KB

.reloc Size: 512B - Virtual size: 306B

.text
Size: 94KB - Virtual size: 133KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 76KB - Virtual size: 75KB

.reloc
Size: 512B - Virtual size: 306B