ba9d44096097e9494a0ca05a45c4ad63

General

Target

ba9d44096097e9494a0ca05a45c4ad63
Size

497KB
MD5

ba9d44096097e9494a0ca05a45c4ad63
SHA1

38b02bde5a502b153b0e79a30816e23f1fe4099d
SHA256

817fd1092d265aa7b650515d7a0c195d28aed1c9925d33f1ea31e98a3e7e7d4e
SHA512

4847be99e3431d050d30e8a8d2023dad7b844e43b381287b465ee77b730da0bc40107aa0eede3736068d8b740f22324c279b683f4d9fd1eec93e44d8e79a991b
SSDEEP

12288:YMlD5zQnyuPrY44yOsL7OwGarzVsGfw2XOqUEK4QCjTaD2wNu6k8ksVAPIWV:YMlD5zQnyuPrY44yOsL79GarzVDfEkT4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9d44096097e9494a0ca05a45c4ad63

Files

ba9d44096097e9494a0ca05a45c4ad63
.exe windows:4 windows x86 arch:x86

c8826aa5bd6322491478199474627cab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

ReadUrlCacheEntryStream

user32

WaitForInputIdle
CharUpperW
IsWindow
GetMessageTime
GetMenuState
AdjustWindowRectEx
GetWindowPlacement
ShowOwnedPopups
ShowWindow
ValidateRect
EndDialog
GetDialogBaseUnits
GetLastActivePopup
SetWindowsHookExW
SetWindowTextW

rpcrt4

RpcStringFreeA
NdrClientCall2
RpcBindingFromStringBindingW
RpcImpersonateClient

comdlg32

PrintDlgA
GetOpenFileNameA

msvcrt

__set_app_type

kernel32

ResetEvent
GetFileAttributesA
GetFileAttributesW
HeapAlloc
CopyFileW
GetUserDefaultLCID
WaitForSingleObject
GetLastError
lstrlenA
CloseHandle
GlobalAlloc
GetVersionExW
FindNextFileW
Sleep
CreateProcessW
FindClose
SetLastError
GlobalFree
HeapReAlloc
MulDiv
GetShortPathNameW
WideCharToMultiByte
CreateEventW
HeapFree
GetProcessHeap
FindFirstFileW
lstrcmpiW
VirtualAlloc

ole32

CoCreateInstance

ws2_32

WSAGetLastError

shell32

SHGetFileInfoW
ExtractIconW

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 273KB - Virtual size: 984KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c8826aa5bd6322491478199474627cab

Headers

File Characteristics

Imports

wininet

user32

rpcrt4

comdlg32

msvcrt

kernel32

ole32

ws2_32

shell32

Sections

.text Size: 70KB - Virtual size: 70KB

.rsrc Size: 103KB - Virtual size: 103KB

.data Size: 273KB - Virtual size: 984KB

.rdata Size: 49KB - Virtual size: 48KB

.text
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 103KB - Virtual size: 103KB

.data
Size: 273KB - Virtual size: 984KB

.rdata
Size: 49KB - Virtual size: 48KB