c307707ee9b0f152f04bcaaeaff402ab

General

Target

c307707ee9b0f152f04bcaaeaff402ab
Size

69KB
MD5

c307707ee9b0f152f04bcaaeaff402ab
SHA1

5cfe4d598d7047545811a4ad4348f1a367d7ce70
SHA256

77e756d81854a3455746a4e73e138dd6910c2d2f6d5e52457080385803ba8b5b
SHA512

fac3d7449eddf145614b5d71e7a32ce4c40a98f54f6b10d6a253e5b65310584a546445be7b178b2cbc2ff7c0cde6cf641ab4d1690db480df27e7e40aaab1c6fe
SSDEEP

1536:jxYlo/D1dCytzJNKI9ItULv0niVskGQWZlg7O/:8obnJJN5+t40G4QWZl3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c307707ee9b0f152f04bcaaeaff402ab

Files

c307707ee9b0f152f04bcaaeaff402ab
.exe windows:4 windows x86 arch:x86

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetDateFormatA
HeapAlloc
GetStringTypeW
GetStringTypeA
GetFileType
lstrcmpA
Sleep
DeleteFileA
SetLastError
GetCommandLineA
GlobalFree
GetModuleHandleA
GetFileSize
HeapFree
GetLocalTime
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetFileAttributesA

advapi32

RegOpenKeyA
RegEnumValueA
RegGetKeySecurity
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegReplaceKeyA
RegQueryValueExA
RegQueryValueW
RegCreateKeyExW
RegEnumKeyA
RegLoadKeyW
RegQueryValueExW
RegCreateKeyW
RegCreateKeyExA
RegReplaceKeyW

comctl32

ImageList_EndDrag
ImageList_Create
ImageList_AddIcon
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_Replace
ImageList_Remove
ImageList_LoadImageW
ImageList_Destroy
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetDragImage
ImageList_AddMasked

user32

LoadCursorA
DrawIcon
BlockInput
GetDC
CreateIcon
CopyImage
DrawTextW
GetFocus
AppendMenuW
AppendMenuA
LoadMenuA
EndDialog
GetWindowTextLengthA
IsWindow
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
AlignRects
GetMenu

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 7KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xLuEhT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Nkcznd
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b758c0fe760980b3cb46ae019f908a26

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.adata Size: 24KB - Virtual size: 23KB

.hdata Size: 7KB - Virtual size: 39KB

.xLuEhT Size: 2KB - Virtual size: 2KB

.Nkcznd Size: 1024B - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 5KB

.adata
Size: 24KB - Virtual size: 23KB

.hdata
Size: 7KB - Virtual size: 39KB

.xLuEhT
Size: 2KB - Virtual size: 2KB

.Nkcznd
Size: 1024B - Virtual size: 1KB