a38dbe3a3e99b9b4b4ce06d95991837c

General

Target

a38dbe3a3e99b9b4b4ce06d95991837c
Size

64KB
MD5

a38dbe3a3e99b9b4b4ce06d95991837c
SHA1

69a90e71ff5a1668b4c4913403d810ac9a3617a5
SHA256

b41687c33ae3f567e5783595010f7da93925f1bd793493a0fab3c505320b683e
SHA512

19b17d066942e1f9fdb75b7c07c64313864e8d60e0430a1889493448afd32cecd0d6d88f52d5dd3d211423f5e036fd46da2e4eecbcd5fe3fe71012d8cc617971
SSDEEP

1536:tKEm1ca9d9euLFUc9g0ZqAUYScOIF9ydbIMXQ:UEKcaUuxUcD33Sc7FIacQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a38dbe3a3e99b9b4b4ce06d95991837c

Files

a38dbe3a3e99b9b4b4ce06d95991837c
.exe windows:4 windows x86 arch:x86

e384615be0583f5a1f158250b2d88c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
MultiByteToWideChar
lstrcpyW
LockResource
LoadLibraryA
TerminateThread
GetPrivateProfileStringW
lstrlenW
SetEvent
GlobalDeleteAtom
FindClose
CancelWaitableTimer
ReadProcessMemory
WaitForSingleObject
CloseHandle
CreateThread
GetFileAttributesExW
GetModuleHandleW
DuplicateHandle
SizeofResource
GetSystemTime
SetCurrentDirectoryW
SetFilePointer
GetCurrentThread
FindFirstFileW
FreeResource
InterlockedIncrement
FindFirstChangeNotificationW
MulDiv
GetProcAddress
WritePrivateProfileStringW

user32

SystemParametersInfoW
GetSysColor
GetClassNameW
RegisterHotKey
GetWindowRect
InvalidateRect
GetWindowDC
GetDlgItem
SetCursorPos
DefWindowProcW
TranslateMessage
CreateWindowExW
GetMessageW
SetWindowPos
MessageBoxW
PostMessageW
IsWindow
DestroyIcon
SetCursor
FillRect
ReleaseCapture
SendMessageW

gdi32

SetTextColor
GetDeviceCaps
GetObjectW
CreateCompatibleDC
CreateRoundRectRgn
SetMapMode

advapi32

StartServiceW
LookupAccountSidW
RegNotifyChangeKeyValue
RegSetValueExW
GetUserNameW

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e384615be0583f5a1f158250b2d88c3e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 992B

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 992B