bb59a5bad8f119d95198accdfb34a4a0

General

Target

bb59a5bad8f119d95198accdfb34a4a0
Size

97KB
MD5

bb59a5bad8f119d95198accdfb34a4a0
SHA1

52106d0423520640f70da1a4073f64e0df5cb485
SHA256

715ee57c4ec3b36c2e6cc14597cdccbe0e2b10cc0f0b5bc196697f1fa4862a80
SHA512

1c2987e124da55136050efba0b2282fe53244bfc841f8cf454aa2296661a462358fa970b66bfee1ec0618872fdfa7072b5ae041990796db9d68c7bc3e55df2ce
SSDEEP

1536:51IjsLmIDpsg34biwAz90VbNj7tdAzXof1tqkzOO5cSi4iXHifKvtota:5ajsbSgKAz9CdAzXE1YXPOKvtota

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb59a5bad8f119d95198accdfb34a4a0

Files

bb59a5bad8f119d95198accdfb34a4a0
.exe windows:5 windows x86 arch:x86

6d20643210585460c48340f02dc73568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoA

advapi32

RegQueryValueExW
InitializeAcl
RegDeleteValueA
RegEnumKeyExW
AllocateAndInitializeSid
RegDeleteKeyA
RegEnumKeyExA
FreeSid
RegSetValueExA
LookupPrivilegeValueA
RegDeleteValueW

gdi32

PlayMetaFileRecord
CreateDCW
UnrealizeObject
StretchBlt
PolyBezierTo
CreatePen
SetRectRgn
LPtoDP
RealizePalette
GetStockObject
BitBlt
TextOutA
GetCurrentPositionEx
GetTextAlign
AngleArc
CreatePalette

comctl32

ImageList_AddMasked
InitCommonControlsEx
InitCommonControls
CreateToolbarEx
ImageList_ReplaceIcon
ImageList_Create
PropertySheetA

msvcrt

_lock
_wtol
_mbsicmp
?terminate@@YAXXZ
fputc
_open_osfhandle
_wcsicmp
memcpy
??2@YAPAXI@Z
realloc
__p___initenv
__setusermatherr
_adjust_fdiv
bsearch
_strcmpi
_XcptFilter
wcstol
iswctype

kernel32

SetThreadPriority
GetTempFileNameA
GlobalUnlock
LocalAlloc
DeleteCriticalSection
ExitProcess
GetLastError
VirtualAlloc
CloseHandle

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d20643210585460c48340f02dc73568

Headers

File Characteristics

Imports

version

advapi32

gdi32

comctl32

msvcrt

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 36KB - Virtual size: 86KB

.idata Size: 10KB - Virtual size: 23KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 36KB - Virtual size: 86KB

.idata
Size: 10KB - Virtual size: 23KB

.rsrc
Size: 20KB - Virtual size: 19KB