b622c57989b99bafcbde333c5c496f82725d5112f54762b06168544b74f6eb79

General

Target

b622c57989b99bafcbde333c5c496f82725d5112f54762b06168544b74f6eb79
Size

73KB
MD5

64b2c073b616e32df5cd7e0cb96841b4
SHA1

7bb61a3c7f79363404a077f36d80918ef604cec4
SHA256

b622c57989b99bafcbde333c5c496f82725d5112f54762b06168544b74f6eb79
SHA512

ede0c895d6a0c4d51b859084e5cbb719513d3fe2097ff89f7e0aa1df01f28da6a2801953756fa9db489bd8ece6225a8695cd85229767730c9f55f9a81d57ed20
SSDEEP

1536:Itka3G9MXSRa+ycuCRo0oxNqIxSupVvIC74zLO:Qka29MXZxII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b622c57989b99bafcbde333c5c496f82725d5112f54762b06168544b74f6eb79

Files

b622c57989b99bafcbde333c5c496f82725d5112f54762b06168544b74f6eb79
.exe windows:4 windows x86 arch:x86

ea6c8092f8807723f1489f32ba14c9f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconW
LoadCursorW
RegisterClassExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
SendMessageW
DestroyWindow
DialogBoxParamW
BeginPaint
DrawTextW
EndPaint
PostQuitMessage
SetFocus
EndDialog
CreateWindowExW

kernel32

HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
VirtualFree
ReadFile
GetTickCount
LoadLibraryA
CreateFileA
GetSystemDirectoryW
CloseHandle
CreateFileW
LoadLibraryW
GetCommandLineW
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapFree
GetEnvironmentStrings
GetProcAddress
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

gdi32

DeleteObject
CreateSolidBrush
SetTextAlign
GetStockObject

comctl32

InitCommonControlsEx

shell32

CommandLineToArgvW
DragFinish
ExtractIconA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea6c8092f8807723f1489f32ba14c9f4

Headers

File Characteristics

Imports

user32

kernel32

gdi32

comctl32

shell32

Sections

.text Size: 18KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 10KB - Virtual size: 14KB

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 18KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 10KB - Virtual size: 14KB

.rsrc
Size: 18KB - Virtual size: 18KB