ad8e92cd17da649b955d16da79ca6d6c

General

Target

ad8e92cd17da649b955d16da79ca6d6c
Size

44KB
MD5

ad8e92cd17da649b955d16da79ca6d6c
SHA1

c78c23f6c1c57cc8e8de5d638bd75b8821488fc8
SHA256

59c636cc30cc9df022e75353c39ed3fcffeae36cc70ad7c502adfc431666ba1b
SHA512

b49fe6a4760eccbcfb1a95898d1793660ca837634cc60932c3b6add84a150ec05357da1ae409c2d8b4a40849bfdc852c1f8665ca34f70140b1bbc444af25d233
SSDEEP

384:yhlSvbMo93+ogGSBoOXu+ElQXPJQ/76qiO9b5DC2qeyki5w3AeVEZ7gFtptcg:HvAoYDdBN7BBxql9b5moxAeVEWFtpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad8e92cd17da649b955d16da79ca6d6c

Files

ad8e92cd17da649b955d16da79ca6d6c
.exe windows:4 windows x86 arch:x86

3d578177cd9f7199dfd3c3e3595e41ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
Beep
SetFileAttributesA
CopyFileA
GetDriveTypeA
GetModuleFileNameA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
SetFilePointer
GetSystemDirectoryA
CreateThread
GetStringTypeA
Sleep
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

GetForegroundWindow
GetInputState
PostThreadMessageA
GetMessageA
GetWindowRect
MoveWindow

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3d578177cd9f7199dfd3c3e3595e41ed

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 16KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 16KB