adaec016d54a8a8b8e85a7ecb64f9e11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adaec016d54a8a8b8e85a7ecb64f9e11
Size

395KB
MD5

adaec016d54a8a8b8e85a7ecb64f9e11
SHA1

b8eb16650f5d477c8c6fbd4a085374bef647de7d
SHA256

e4ca221dd2fcfca4ffc8973c435846f1221866d7b8b71007d2495026164ff6d2
SHA512

42c69b8c623a1cec431a374550c8fdda30cdf94a6a97e8dc2e2f1f83995512396cbb08fd4813f6e97588d2a1047f5160b3434a61694b7a73b25be776e15ae249
SSDEEP

6144:1zs0xmw4ul2WyC+t+zaRxZAc7ac3CmHKwC6pa702LqDajIaz+:609uztTxZ7acTHvan2DajIn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Drive.Software.Clock.Tray.Skins.v4.3.Cracked-CzW/Crack/ClockTraySkins.exe

Files

adaec016d54a8a8b8e85a7ecb64f9e11
.zip
Drive.Software.Clock.Tray.Skins.v4.3.Cracked-CzW/Crack/ClockTraySkins.exe
.exe windows:4 windows x86 arch:x86

113a04e5ca863d13b870a2c3723b86ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

shell32

ShellExecuteA

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

comdlg32

ChooseColorA

winmm

waveOutGetNumDevs

shfolder

SHGetFolderPathA

Sections

CODE
Size: 369KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Drive.Software.Clock.Tray.Skins.v4.3.Cracked-CzW/czw.nfo
Drive.Software.Clock.Tray.Skins.v4.3.Cracked-CzW/file_id.diz