a4654c8c982168dac7967ce401f2f100

Sharing

Copy URL

Twitter E-mail

General

Target

a4654c8c982168dac7967ce401f2f100
Size

88KB
MD5

a4654c8c982168dac7967ce401f2f100
SHA1

c9e0028f54d35ca9ce011acf8f1ce405dc6f0b55
SHA256

77f853548d034089a74dd09109997701581ce73754035dedb9a74aa8cb67c059
SHA512

73389de57b9e181ce58152dd42ba5d7aeb7324918f8ffe9ad0efd152215d700b5c581cead66b6619b5504e2b3eeaa41a6c48d3ddec2a90acc87438c9f4b29a29
SSDEEP

1536:AoQIKo6iHk1t7qaeJdb3rydGs+af7f6QEiRvbl9lr:ANIKUytWaKb33glblv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4654c8c982168dac7967ce401f2f100

Files

a4654c8c982168dac7967ce401f2f100
.exe windows:4 windows x86 arch:x86

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStringTypeA
GetCommandLineA
GlobalAlloc
GetCommandLineA
HeapAlloc
GetCommandLineA
ExitProcess
GetCommandLineA
GetModuleHandleA
GetCommandLineA
WideCharToMultiByte
GetCommandLineA
GetFileType
GetCommandLineA
FreeLibrary
GetCommandLineA
lstrcmpA
GetCommandLineA

user32

DialogBoxParamA
DrawTextW
IsWindow
InsertMenuA
CopyImage
LoadCursorA
AppendMenuW
LoadMenuA
EndDialog
GetWindowTextLengthA
CopyIcon
GetCursor
GetDlgItem
BlockInput
GetMenu
IsMenu
CopyRect
CloseWindow
GetFocus
GetWindowTextA
CreateIcon
GetDC
AlignRects
DialogBoxParamW
CalcMenuBar
DrawTextA
AppendMenuA
DrawIconEx
DrawIcon

advapi32

RegQueryValueA
RegOpenKeyW
RegQueryInfoKeyW
RegFlushKey
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegLoadKeyW
RegCreateKeyExW
RegReplaceKeyW
RegEnumValueW
RegGetKeySecurity
RegLoadKeyA
RegEnumKeyExA
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExA
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyA
RegQueryInfoKeyW
RegFlushKey
RegEnumValueA
RegLoadKeyA
RegCreateKeyExA
RegReplaceKeyW
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyW
RegEnumKeyExW
RegLoadKeyW
RegOpenKeyExA
RegGetKeySecurity
RegOpenKeyW

Sections

.tedt
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edaaa
Size: 9KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 924B

IMAGE_SCN_MEM_READ

.raac
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e31641bd43f93614381e0800122e642a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.tedt Size: 18KB - Virtual size: 18KB

.rdata Size: 47KB - Virtual size: 46KB

.edaaa Size: 9KB - Virtual size: 35KB

.bss Size: - Virtual size: 924B

.raac Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 4KB

.tedt
Size: 18KB - Virtual size: 18KB

.rdata
Size: 47KB - Virtual size: 46KB

.edaaa
Size: 9KB - Virtual size: 35KB

.bss
Size: - Virtual size: 924B

.raac
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 4KB