c505532998da733f1615b6ef43580f60

Sharing

Copy URL

Twitter E-mail

General

Target

c505532998da733f1615b6ef43580f60
Size

189KB
MD5

c505532998da733f1615b6ef43580f60
SHA1

6920e52b6fe8eb83d628f19562d461969d328a7c
SHA256

609427db460198d5710082d04d66cb671eaa0693fa79ffe2cac94ce3e7148073
SHA512

0ace87287f4b37d8161f66fe0ed5b2875efc08d10ecc5c1a244d1c863134ca3d981d907b6f9c4788da744dd6aa1855888513fe0220db4e447a8e812f8ce8b526
SSDEEP

3072:C87jr7bCIAGtuyairau1YTkFIcnri19+OAhOOtfdC+yn:C8jCxMuy6u1YeIcnrQ97AFhk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c505532998da733f1615b6ef43580f60

Files

c505532998da733f1615b6ef43580f60
.exe windows:4 windows x86 arch:x86

d209331adbc5994a76b5aba1c45501ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
IsBadReadPtr
GetCommandLineA
ExitThread
VirtualAllocEx
GetLastError
GetVersionExA
GetModuleHandleA
ExitProcess
GetModuleHandleW
LoadLibraryExA
VirtualAlloc

oleaut32

GetErrorInfo
OleLoadPicture
SysFreeString
SafeArrayUnaccessData

gdi32

GetObjectA
GetBitmapBits
GetDIBColorTable
SetBkColor
RestoreDC
CopyEnhMetaFileA
GetPaletteEntries
GetDCOrgEx
CreateDIBSection
CreateBrushIndirect

shell32

SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
SHGetSpecialFolderLocation
DragQueryFileA

ole32

CoGetMalloc
CoRevokeClassObject
CoRegisterClassObject
CoUnmarshalInterface
StringFromIID
CreateBindCtx
CoGetObjectContext
CoDisconnectObject
CoFreeUnusedLibraries
CoUninitialize

comctl32

ImageList_Write
ImageList_GetBkColor

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res8
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res5
Size: 1024B - Virtual size: 743B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res2
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.res6
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d209331adbc5994a76b5aba1c45501ae

Headers

File Characteristics

Imports

kernel32

oleaut32

gdi32

shell32

ole32

comctl32

Sections

.text Size: 56KB - Virtual size: 55KB

DATA Size: 1KB - Virtual size: 1KB

.res8 Size: 1024B - Virtual size: 948B

.res5 Size: 1024B - Virtual size: 743B

.res2 Size: 16KB - Virtual size: 15KB

.res6 Size: 111KB - Virtual size: 110KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 56KB - Virtual size: 55KB

DATA
Size: 1KB - Virtual size: 1KB

.res8
Size: 1024B - Virtual size: 948B

.res5
Size: 1024B - Virtual size: 743B

.res2
Size: 16KB - Virtual size: 15KB

.res6
Size: 111KB - Virtual size: 110KB

.rsrc
Size: 1KB - Virtual size: 1KB