a40462598115f9907b5cbbb907152eae

General

Target

a40462598115f9907b5cbbb907152eae
Size

286KB
MD5

a40462598115f9907b5cbbb907152eae
SHA1

ed4088410ae5462a9395f16426aa010f371fe8a4
SHA256

3cba236177fec02322032864eaf301b94b56ce1f136a849f2aec9cde55f9c9e5
SHA512

545d7e2ff37e4529d47d99380fd2b6a264d0d352b87eaf5082b63429af569495778c4eae4656c568aff48f9e424a7917e6b10e368df3ced952581d95bdba032e
SSDEEP

6144:pIlHTSMTNUbUlQMVp1jt68eJSem+lHex1iB:WhTHNFlQMVp1Y8e++lHSi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a40462598115f9907b5cbbb907152eae

Files

a40462598115f9907b5cbbb907152eae
.exe windows:4 windows x86 arch:x86

2ad6b3be44ba5a88ecf017aa6eab75e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

rpcrt4

UuidCreate

shlwapi

GetAcceptLanguagesW
PathFindExtensionW
StrCmpIW
UrlCreateFromPathW
PathRemoveFileSpecW
UrlUnescapeW
PathIsRelativeW
PathAppendW
PathCreateFromUrlW
PathCombineW

kernel32

GetProcAddress
FindAtomW
GetSystemDirectoryW
GetPrivateProfileIntW
HeapFree
GetPrivateProfileStringW
lstrlenA
FindClose
WaitForSingleObject
GetWindowsDirectoryA
GetCurrentProcessId
FindNextFileW
FreeLibrary
LocalFree
EnumResourceLanguagesW
GetModuleHandleW
ReleaseMutex
HeapAlloc
WritePrivateProfileStringW
FindFirstFileW
GetModuleHandleA
LoadLibraryW
ExpandEnvironmentStringsW
GetConsoleCursorMode
GetSystemInfo
GetProcessHeap
CopyFileW
GetCurrentDirectoryW
SetFileAttributesW
CreateMutexW
LoadLibraryExA
lstrcmpiW
LoadLibraryExW
GetCurrentProcess

Sections

.text
Size: 146KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ad6b3be44ba5a88ecf017aa6eab75e1

Headers

File Characteristics

Imports

shell32

rpcrt4

shlwapi

kernel32

Sections

.text Size: 146KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 137KB - Virtual size: 136KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 137KB - Virtual size: 136KB

.rsrc
Size: 1024B - Virtual size: 4KB