c455814f2c85baad6e3bb07ebdde2f97

Sharing

Copy URL Twitter E-mail

General

Target

c455814f2c85baad6e3bb07ebdde2f97
Size

106KB
MD5

c455814f2c85baad6e3bb07ebdde2f97
SHA1

0b94ea469f5d0ba50d6eb88f3ec0d5e22751b97d
SHA256

23e7a29063f9e83700a699d7e920672db35797a00fecf33a983a49dc779f3673
SHA512

fd9be8f850da9f33551cd67861513335556e4e0ef6865426a6913dd7e9969008b531f11f48b0120e193cbf348d114d4f17732037303799fe550fc9a882b1ee04
SSDEEP

1536:50y9fm7SoDxdSMshIJDTtxdPrF9zsXnevTSG0cGZQmBWZx9JBCl:50WypbJshIJDTtfoXnev0nZQm4ZB4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c455814f2c85baad6e3bb07ebdde2f97

Files

c455814f2c85baad6e3bb07ebdde2f97
.exe windows:4 windows x86 arch:x86

3acd32a62088f4bb050643c88aaf97cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLangID
SetEvent
SetEndOfFile
FreeLibrary
GetModuleHandleA
RaiseException
LoadLibraryA
lstrcpyA
LoadLibraryExA
FreeResource
FindFirstFileA
GetFileType
VirtualAlloc
lstrcpynA
ExitProcess
MoveFileExA
GetLastError
HeapAlloc
ExitThread
GetVersionExA
GetStartupInfoA

user32

GetKeyState
EnumWindows
SetWindowTextA
GetIconInfo
DrawMenuBar
GetCursor
GetDCEx
GetSubMenu
CharNextA
GetMenuItemID
EnumChildWindows
EnableMenuItem
SetCursor
GetFocus
GetMenuStringA
EnableScrollBar
GetLastActivePopup
EnableWindow
IsChild
GetClassInfoA
GetDesktopWindow
GetScrollInfo
DispatchMessageA
GetClipboardData
DefWindowProcA
GetCapture
CallNextHookEx

shlwapi

SHDeleteKeyA

gdi32

CopyEnhMetaFileA
SaveDC
SetTextColor
SetBkColor
GetRgnBox

msvcrt

mbstowcs
memmove
wcsncmp
strncmp
calloc
atol
time
exit
sqrt
sprintf
memcpy
exp
clock
log
srand
wcscspn
pow

version

GetFileVersionInfoSizeA
VerInstallFileA

Sections

.CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 999B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3acd32a62088f4bb050643c88aaf97cf

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

gdi32

msvcrt

version

Sections

.CODE Size: 50KB - Virtual size: 49KB

.idata Size: 50KB - Virtual size: 50KB

.bss Size: 2KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 999B

.tls Size: 2KB - Virtual size: 1KB

.CODE
Size: 50KB - Virtual size: 49KB

.idata
Size: 50KB - Virtual size: 50KB

.bss
Size: 2KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 999B

.tls
Size: 2KB - Virtual size: 1KB