2fa783d34429547dab3cd0d91b6e6887300566d5a3229a155881a953758f6a06

Sharing

Copy URL Twitter E-mail

General

Target

2fa783d34429547dab3cd0d91b6e6887300566d5a3229a155881a953758f6a06
Size

188KB
MD5

0a7345bec5ddba70bf7313b3207458f2
SHA1

92f7cbdfbe5011fbff199db71220b94091edf577
SHA256

2fa783d34429547dab3cd0d91b6e6887300566d5a3229a155881a953758f6a06
SHA512

a8784fdccc5dc31d75234886d68b8dd6ecdea6c5cfa0d14f747d29bd8f2a4644a0b056168233863c42709dd221c0c08928837440c2821073ee554144775631fd
SSDEEP

3072:sD5PIRrCC0hFxV+nGxNFMgAvZV5rOuPi/v8g8czuI5+Hk2Wo7shdOfx9+CK5wKSk:YIchfaijAv5r48quIvD9X9CBJjy8cHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fa783d34429547dab3cd0d91b6e6887300566d5a3229a155881a953758f6a06

Files

2fa783d34429547dab3cd0d91b6e6887300566d5a3229a155881a953758f6a06
.exe windows:4 windows x86 arch:x86

6aa6ffa3516033690d42bb8ecc2a62fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
InterlockedDecrement
ReleaseMutex
GetWindowsDirectoryA
CompareStringA
GetModuleHandleA
InterlockedExchange
WaitForSingleObject
FreeLibrary
GetLastError
CloseHandle
ExitProcess

fineobj

?SetString@CSetupBase@FObj@@QAEXABVCUnicodeString@2@@Z
?Value@CUnicodeString@FObj@@QBE_NAAHH@Z
?GetString@CSetupBase@FObj@@QBE?AVCUnicodeString@2@XZ
?AddResourcePrefix@FObj@@YAXPBG0@Z
?GetFineObjectsVersion@FObj@@YAHXZ
??3@YAXPAX@Z
?DoCreateObject@FObj@@YA?AV?$CPtr@VIObject@FObj@@@1@ABVCUnicodeString@1@@Z
?SetCurrentLanguageCode@FObj@@YAXH@Z
?LoadModule@FObj@@YAPAUHINSTANCE__@@PBG@Z
?GenAssert@FObj@@YAXPBGJ@Z
?Initialize@FObj@@YA_NPBG0@Z
??1CUnicodeString@FObj@@QAE@XZ
?Delete@CException@FObj@@QAEXXZ
?Warning@FObj@@YAXPAVCException@1@@Z
?Clean@FObj@@YAXXZ
??_7CSetupBase@FObj@@6B@
??0CUnicodeString@FObj@@QAE@PBG@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@JH@Z
?GetEXEDir@FileSystem@FObj@@YA?AVCUnicodeString@2@XZ
??0CSetupBase@FObj@@IAE@ABVCUnicodeString@1@0W4TSetupType@1@@Z
?destroy@CUnicodeStringBody@FObj@@QAEXXZ
?SetAppTitle@FObj@@YAXABVCUnicodeString@1@@Z

msvcrt

__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_wcmdln
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
exit
_controlfp
__RTDynamicCast
_XcptFilter
_exit
__CxxFrameHandler

user32

MessageBoxA

Exports

Exports

__FineObjUsed

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6aa6ffa3516033690d42bb8ecc2a62fb

Headers

File Characteristics

Imports

kernel32

fineobj

msvcrt

user32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 168KB - Virtual size: 168KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 168KB - Virtual size: 168KB