bc146339972a8f5515ec62927ae8490b

General

Target

bc146339972a8f5515ec62927ae8490b
Size

58KB
MD5

bc146339972a8f5515ec62927ae8490b
SHA1

b0567398fce7b69957b4482cf446b43c423bf512
SHA256

7dee7219063ff2f9defadc02434a0cd895114648df53fdc4f206c2a04c33047c
SHA512

a8562c16ba48225001c3ebd6b6d5c00054a101057706292cd10a655d9caec80047fd44102fa7d17c1baf3847a579f2e5d1a88730490c789a0195b3d71be186f5
SSDEEP

768:jxY6ioGVevZr5J13tuhyEDu564M2NKFG8L4yhtURFvU558alFaSKCLVLjiCX:jxYlo/D1dCytzJNKI9ItULvUT2ZI9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc146339972a8f5515ec62927ae8490b

Files

bc146339972a8f5515ec62927ae8490b
.exe windows:4 windows x86 arch:x86

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetDateFormatA
HeapAlloc
GetStringTypeW
GetStringTypeA
GetFileType
lstrcmpA
Sleep
DeleteFileA
SetLastError
GetCommandLineA
GlobalFree
GetModuleHandleA
GetFileSize
HeapFree
GetLocalTime
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetFileAttributesA

advapi32

RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW

comctl32

ImageList_EndDrag
ImageList_Create
ImageList_AddIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetDragImage
ImageList_AddMasked

user32

LoadCursorA
DrawIcon
BlockInput
GetDC
CreateIcon
CopyImage
DrawTextW
GetFocus
AppendMenuW
AppendMenuA
LoadMenuA
EndDialog
GetWindowTextLengthA
IsWindow
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
AlignRects
GetMenu

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 7KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuEhT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkcznd
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.adata Size: 24KB - Virtual size: 23KB

.hdata Size: 7KB - Virtual size: 39KB

.xLuEhT Size: 2KB - Virtual size: 2KB

.Nkcznd Size: 1024B - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.adata
Size: 24KB - Virtual size: 23KB

.hdata
Size: 7KB - Virtual size: 39KB

.xLuEhT
Size: 2KB - Virtual size: 2KB

.Nkcznd
Size: 1024B - Virtual size: 1KB