a45806c1a981329d2ad694d671e9c931

General

Target

a45806c1a981329d2ad694d671e9c931
Size

51KB
MD5

a45806c1a981329d2ad694d671e9c931
SHA1

6da3e3d2962e0df11b82c53ad5a6f4d77be5ec2b
SHA256

ca87134d5ec4d404a5e05971a038e1de9d412f17b2807b1681e661979c0e851b
SHA512

a457a690fe727d79cf391e407ac912fb89f7164cdd0e99144b204826383b4df8ec3f4b2efd581c21f03cad2bb38f600c8ac30bcba3580bbc83a2a3c80e2e5113
SSDEEP

768:5yNq/9zsjmDNDqkBmRMbiPa5nl+slDELnVL1coW:vYRKi2l+ODymoW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a45806c1a981329d2ad694d671e9c931

Files

a45806c1a981329d2ad694d671e9c931
.exe windows:4 windows x86 arch:x86

39225311b0797a2de9e5289a31f8c253

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
SetFileAttributesA
LockResource
LoadResource
FindResourceA
GetTempPathA
GetSystemDirectoryA
CreateDirectoryA
GetEnvironmentVariableA
GetVersionExA
LCMapStringA
ReadFile
SetEndOfFile
SizeofResource
GetACP
GetCPInfo
CreateFileA
SetStdHandle
HeapReAlloc
VirtualAlloc
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
SetFilePointer
HeapAlloc
RtlUnwind
VirtualFree
LoadLibraryA
GetProcAddress
FreeLibrary
WinExec
GetOEMCP
LocalFree
HeapCreate
HeapDestroy
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
WriteFile
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType

user32

PostQuitMessage
LoadAcceleratorsA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
MessageBoxA

advapi32

GetNamedSecurityInfoA
SetEntriesInAclA
SetNamedSecurityInfoA
GetUserNameA

ole32

OleUninitialize
OleInitialize

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39225311b0797a2de9e5289a31f8c253

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 320KB - Virtual size: 319KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 320KB - Virtual size: 319KB