c54652094b659d6b82d7d09a62736b33

General

Target

c54652094b659d6b82d7d09a62736b33
Size

72KB
MD5

c54652094b659d6b82d7d09a62736b33
SHA1

e45d89309c8f7f710acd5e03426ffe2532950869
SHA256

e7b9be6ae6a602d40f17cf1acece987ea0698de6cd435ae3b5d0927e82e47943
SHA512

28846fa75e28b6e1d0ce3ca640ee81e31b77d5e66bac10cfc96dd1ba96366491c7317d9efd6eac48beac3897fbaf639a79733814cce025d27131ada376c97568
SSDEEP

768:Mto4jsKeaoChFFo+O7pFGEST7jySGFt3t0Qr1YVFpLh8H97U5fgY2m7:M2DDaHfo+QrCTnyL1YjpLhSU5fp7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c54652094b659d6b82d7d09a62736b33

Files

c54652094b659d6b82d7d09a62736b33
.exe windows:4 windows x86 arch:x86

ac2da076c1bb99ff6b0232bf0ff33364

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyW
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyExW
RegCreateKeyExA
RegOpenKeyA
RegQueryValueW
RegQueryInfoKeyW
RegEnumValueA
RegEnumKeyExA
RegGetKeySecurity
RegDeleteValueA
RegOpenKeyExW
RegReplaceKeyW
RegOpenKeyW
RegDeleteValueW
RegLoadKeyA

user32

GetWindowTextLengthA
GetMenu
DrawTextW
AppendMenuA
CalcMenuBar
DialogBoxParamA
GetCursor
LoadCursorA
InsertMenuA
GetDC
AlignRects
DialogBoxParamW
IsWindow
DrawIcon
CopyRect
GetDlgItem
GetWindowTextA

comctl32

ImageList_GetDragImage
ImageList_Copy
ImageList_Read
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_LoadImageA
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageRect
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_DragShowNolock
ImageList_GetIconSize
ImageList_BeginDrag
InitCommonControls
ImageList_DragEnter

kernel32

FreeLibrary
GetFileType
GlobalFree
GetStdHandle
GetCPInfo
lstrlenA
GetStringTypeA
GetFileSize
GetModuleFileNameA
GetCommandLineA
SetLastError
GetLocalTime
GetLastError
lstrcpynA
CloseHandle
Sleep
lstrcmpiA
lstrcatA
GlobalAlloc

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac2da076c1bb99ff6b0232bf0ff33364

Headers

File Characteristics

Imports

advapi32

user32

comctl32

kernel32

Sections

.text Size: 4KB - Virtual size: 1KB

.data Size: 56KB - Virtual size: 54KB

.rdata Size: 4KB - Virtual size: 95KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 1KB

.data
Size: 56KB - Virtual size: 54KB

.rdata
Size: 4KB - Virtual size: 95KB

.rsrc
Size: 4KB - Virtual size: 2KB