c2a26602ee337e3805e6d15a1b64d540

General

Target

c2a26602ee337e3805e6d15a1b64d540
Size

290KB
MD5

c2a26602ee337e3805e6d15a1b64d540
SHA1

dfe56a810fe38b314869d17a0b4f3bc21d04085e
SHA256

c18f02b5006e806289fe24a0ac0ee8134c09f3026861e5ecfa7a9eabb0d7f537
SHA512

a24cd32dac2b45d994c05b699c637e7325187f04a852eb127874e8f817d9cbbd6de57ddc0c2bf687d05c984a91cd9624729331cf8c6d3a00dc590e814588a30c
SSDEEP

6144:KYSAoymn4eoRyvQqZbwqaeE2xCHgRwjiPl6AWjTfO:KDBn49RyLJYeEJHgRw2wAATf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a26602ee337e3805e6d15a1b64d540

Files

c2a26602ee337e3805e6d15a1b64d540
.exe windows:4 windows x86 arch:x86

bc0ad155695ac465a1b15842a75bf9a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
DestroyIcon
IsRectEmpty
GetSubMenu
GetCursor
RedrawWindow
SetCursor
GetWindowLongW
IsDialogMessageW
SetWindowLongA
DefMDIChildProcA
IsWindowEnabled
ShowWindow

kernel32

GetProcAddress
SizeofResource
RaiseException
VirtualAllocEx
GetSystemDefaultLangID
SetThreadLocale
InitializeCriticalSection
CreateEventA
GetDiskFreeSpaceA
CreateThread
HeapDestroy
HeapFree
GetFileType
GetModuleHandleA
LoadLibraryA
GetStringTypeA
GlobalAlloc
GetVersion
FreeResource
WaitForSingleObject
CreateFileA
GetOEMCP
GetEnvironmentStrings
GetFileSize
GetCommandLineA
CloseHandle
lstrlenA
WideCharToMultiByte
lstrcmpiA
GetLastError
EnterCriticalSection
ResetEvent
GetACP
GetDateFormatA
ExitThread
DeleteCriticalSection
GetFullPathNameA
DeleteFileA
CompareStringA
GlobalDeleteAtom
SetFilePointer
HeapAlloc
SetEndOfFile
ExitProcess
WriteFile
SetEvent
LocalAlloc
GetLocaleInfoA
GetStartupInfoA
GetVersionExA
EnumCalendarInfoA
MulDiv
lstrcmpA
lstrcpynA
ReadFile
GetStdHandle
Sleep

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteKeyA

Sections

CODE
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc0ad155695ac465a1b15842a75bf9a0

Headers

File Characteristics

Imports

user32

kernel32

advapi32

Sections

CODE Size: 42KB - Virtual size: 42KB

.rdata Size: 234KB - Virtual size: 233KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 10KB - Virtual size: 10KB

CODE
Size: 42KB - Virtual size: 42KB

.rdata
Size: 234KB - Virtual size: 233KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 10KB - Virtual size: 10KB