be52cdaf474caf05af24814e8b0b1e2f

General

Target

be52cdaf474caf05af24814e8b0b1e2f
Size

903KB
MD5

be52cdaf474caf05af24814e8b0b1e2f
SHA1

cbfdd4e87d2c8981fca67dec3e0c149439a6b457
SHA256

77e1b0fdb04cc8a4dadd6f7f25f9120c7348d53d09d66cf2e9f1db7275daba5c
SHA512

9445e447c442e9b35a5e24cb5c23fa46841cc9ed8c1a57707937f6996b5ce6b672df1e1c8bd3bc0ee51368793091c8f443e800844be971805deaa04cc3707261
SSDEEP

24576:AWU7Uuc3DsthDlrpF11f4ilIRlSmUyL163z:XU7Uu8cpr/Q79T6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be52cdaf474caf05af24814e8b0b1e2f

Files

be52cdaf474caf05af24814e8b0b1e2f
.exe windows:5 windows x86 arch:x86

2dad4c77351d98755bc0ea335e0f442d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
FreeLibrary
MultiByteToWideChar
GetProcAddress
GetVersionExW
GetVersionExA
GetModuleFileNameW
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
LocalFree
GetSystemWindowsDirectoryW
MoveFileW
lstrcmpiW
GetLongPathNameW
GetShortPathNameW
GetSystemDefaultLangID
GlobalAlloc
QueryPerformanceCounter
VirtualProtect
UnhandledExceptionFilter
GetCurrentThread
LocalAlloc
GetLocaleInfoA
GetVersion
GetShortPathNameA
OpenEventA
CreateEventA
OpenSemaphoreA
CreateSemaphoreA
OpenMutexA
CreateMutexA
GetProcessTimes
GetModuleHandleW
TerminateThread
LoadLibraryW
GetPriorityClass
LeaveCriticalSection
WaitForMultipleObjects
WaitForSingleObject
ReleaseMutex
MapViewOfFile
GetCommandLineW
GlobalFree
LoadLibraryExA

winmm

joyGetPos
midiConnect
midiDisconnect

user32

IsWindow
CreateDialogIndirectParamA
MapDialogRect
CallWindowProcA
CallWindowProcW
LoadBitmapA
GetParent
SendMessageTimeoutA
SetCursor
InvalidateRect
LoadCursorA
ShowWindow
LoadStringW
DrawIconEx
GetDlgItem
EnumDisplayMonitors
DialogBoxParamW

Sections

.text
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 498KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dad4c77351d98755bc0ea335e0f442d

Headers

File Characteristics

Imports

kernel32

winmm

user32

Sections

.text Size: 396KB - Virtual size: 395KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 498KB - Virtual size: 497KB

.edata Size: 6KB - Virtual size: 3.3MB

.text
Size: 396KB - Virtual size: 395KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 498KB - Virtual size: 497KB

.edata
Size: 6KB - Virtual size: 3.3MB