b590444b8c5a3bdc5cebef200f9cf8eb

Sharing

Copy URL Twitter E-mail

General

Target

b590444b8c5a3bdc5cebef200f9cf8eb
Size

160KB
MD5

b590444b8c5a3bdc5cebef200f9cf8eb
SHA1

4bd2d3d98690f574f2e95f995d3e71cde82c9855
SHA256

8425701e167f685f302402028b737fd1ef2bac13d885733b650793913704bb11
SHA512

bb9a15464dcc6da5498f0dfebfe8e09548d4b230e6a8d07f0322670a65043d699fe20df66177d2475f32c51bde96afc1eb64637487df7996b967495410fab605
SSDEEP

3072:CT4kxQNuqmjEFRN5EIfoModtShjsdWOuoyWBa34mPViO:CLEXbEIOEhEBa3BiO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b590444b8c5a3bdc5cebef200f9cf8eb

Files

b590444b8c5a3bdc5cebef200f9cf8eb
.exe windows:4 windows x86 arch:x86

404edc3694bc2c87452e24bfbf64a278

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SafeArrayPtrOfIndex
VariantCopyInd
SysStringLen
SafeArrayGetElement
GetErrorInfo
SafeArrayCreate
RegisterTypeLib
SysFreeString

msvcrt

pow
time
cos
wcscspn
strcmp
memcpy

ole32

CoGetMalloc

gdi32

CreateBrushIndirect
CreateBitmap

kernel32

ExitThread
GetFileAttributesA
GetDiskFreeSpaceA
lstrlenA
FindFirstFileA
DeleteCriticalSection
GetProcessHeap
GetVersion
HeapDestroy
GetLocalTime
GetStartupInfoA
GlobalFindAtomA
GetCurrentProcessId
EnterCriticalSection
GetSystemDefaultLangID
lstrcmpA
CreateThread
SetThreadLocale
GlobalDeleteAtom
LoadLibraryExA
GetEnvironmentStrings
LoadLibraryA
GetTickCount
GetFileType
GlobalAlloc
VirtualQuery
WideCharToMultiByte
SetErrorMode
LockResource
VirtualAllocEx
GetCommandLineA
GetModuleHandleA
ReadFile
SetEndOfFile
DeleteFileA
GetLocaleInfoA
GetCurrentProcess
FreeResource
SetLastError
FormatMessageA
GetStdHandle
CloseHandle
ExitProcess
GetStringTypeA

shell32

SHGetSpecialFolderLocation
SHFileOperationA
SHGetFolderPathA
DragQueryFileA
SHGetDiskFreeSpaceA

comctl32

ImageList_DragShowNolock
ImageList_Create
ImageList_Remove
ImageList_Destroy
ImageList_Write
ImageList_DrawEx
ImageList_Add

user32

EnumWindows
SetForegroundWindow
GetWindowPlacement
GetMenuItemID
CheckMenuItem
SetParent
EndPaint
EnumThreadWindows
SetActiveWindow
ScrollWindow
InsertMenuA
SetTimer
GetKeyboardLayoutNameA
DefMDIChildProcA
CharUpperBuffA
MsgWaitForMultipleObjects
ReleaseCapture
FindWindowA
TranslateMessage
PostQuitMessage
GetSystemMenu
PeekMessageW
GetWindowDC
IsChild
MessageBeep
SetMenu
FillRect
GetWindowThreadProcessId
IsWindowEnabled
SetWindowPlacement
GetKeyboardType
OemToCharA
SendMessageA
SendMessageW
InflateRect
WaitMessage
UpdateWindow
GetScrollPos
DestroyWindow

version

VerInstallFileA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

404edc3694bc2c87452e24bfbf64a278

Headers

File Characteristics

Imports

oleaut32

msvcrt

ole32

gdi32

kernel32

shell32

comctl32

user32

version

Sections

.text Size: 28KB - Virtual size: 28KB

.idata Size: 512B - Virtual size: 68KB

.edata Size: 130KB - Virtual size: 129KB

.text
Size: 28KB - Virtual size: 28KB

.idata
Size: 512B - Virtual size: 68KB

.edata
Size: 130KB - Virtual size: 129KB