a41f8d445a28c1da74013691a6f474df

Sharing

Copy URL Twitter E-mail

General

Target

a41f8d445a28c1da74013691a6f474df
Size

124KB
MD5

a41f8d445a28c1da74013691a6f474df
SHA1

f2ef16b555b77e0bf3842d6ccc654953fc1662fc
SHA256

4d4ee8d2eb83b103756dcb33ed905b8a10ab00c6c589addfe562fabe08f9b467
SHA512

dc3b6656cbc22e72105b194664fb7b5e95ad61fbc78f0e4092135e72a2fb8046cb19bbfd71810aa040d5deec0c059423fd1b36c618f3a2410247f7407c280200
SSDEEP

3072:lxZmYFJyP60ZkuOqYAWfxoI4ZmpDQhWf3SykB6deHErAsoo8tDX:vnFwP60QrFA8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a41f8d445a28c1da74013691a6f474df

Files

a41f8d445a28c1da74013691a6f474df
.exe windows:4 windows x86 arch:x86

dd0356c0d4aeabae2c6b4fa9a41b4bca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

kernel32

HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CreateThread
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
SetEndOfFile
HeapAlloc
HeapFree
SetStdHandle
GetStdHandle
SetHandleCount
CreateEventA
CloseHandle
GetModuleFileNameA
WaitForSingleObject
GetCurrentProcess
TerminateProcess
ExitProcess
ResetEvent
SetEvent
DeleteFileA
FlushFileBuffers
LoadLibraryA
WriteFile
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
GetLastError
ReadFile
SetFilePointer
GetFileType

user32

PtInRect
SetDlgItemTextA
EnableMenuItem
LoadCursorA
RegisterClassA
CreateDialogParamA
GetMessageA
DispatchMessageA
TranslateMessage
LoadIconA
SendMessageA
GetMenu
SetWindowPos
SetWindowTextA
GetWindowRect
PostQuitMessage
GetMenuState
CheckMenuItem
PostMessageA
DialogBoxParamA
SetTimer
IsDlgButtonChecked
GetDlgItemInt
SetDlgItemInt
CheckRadioButton
EndDialog
BeginPaint
EndPaint
LoadStringA
MessageBoxA
KillTimer

gdi32

GetDeviceCaps
DeleteDC
CreateDCA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

DragAcceptFiles
DragQueryPoint
DragQueryFileA
DragFinish

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dd0356c0d4aeabae2c6b4fa9a41b4bca

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 16KB - Virtual size: 24KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 16KB - Virtual size: 24KB

.rsrc
Size: 48KB - Virtual size: 48KB