ca4b16590cf7236dd98bacea56e9740e

General

Target

ca4b16590cf7236dd98bacea56e9740e
Size

832KB
MD5

ca4b16590cf7236dd98bacea56e9740e
SHA1

7f21fcaa65150d8065d9e093942a696f3f5801fc
SHA256

667d6629a45db1dd90a9928812eab96c5adf019cbdb53b8de0ff7d88dfe3c7d0
SHA512

baf52de3a8b81da960414bd3ceba588ce93a2e74d2bc571d2343e35e165040dcd8f12d60dbd91c71728ba5a4a61129323013b855fdf04848e467badde460a4c4
SSDEEP

12288:TDVt1AqOj8wmViPHI6U05NcP/GMeIaQB7OJEtlyeGEWq64tvJ3gVGuN:TDVvw8wHIyr6miB7OJveGjq64HgVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca4b16590cf7236dd98bacea56e9740e

Files

ca4b16590cf7236dd98bacea56e9740e
.dll windows:4 windows x86 arch:x86

b97c76423e89647d33b9867f17b23479

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
GetModuleFileNameA
SetEvent
SetFilePointer
HeapAlloc
GetProcessHeap
VirtualProtect
OpenEventA
GetModuleHandleA
IsBadReadPtr
GetCommandLineA
CreateEventA
LoadLibraryA
GetProcAddress
CreateFileA
GetFileSize
ReadFile
CloseHandle
CreateThread
Sleep
ExitProcess

user32

wsprintfA
wvsprintfA
CallNextHookEx
SetWindowsHookExA
BroadcastSystemMessageA

advapi32

RegCloseKey
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA

msvcrt

_except_handler3
realloc
_strlwr
_initterm
_adjust_fdiv
_strcmpi
free
sprintf
strlen
strcpy
strncpy
strchr
strstr
memset
malloc
strcat
strrchr
strcmp
memcpy

wininet

InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b97c76423e89647d33b9867f17b23479

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

wininet

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB