cad910d8c8b65af4377aa020c23cafcc

Sharing

Copy URL

Twitter E-mail

General

Target

cad910d8c8b65af4377aa020c23cafcc
Size

95KB
MD5

cad910d8c8b65af4377aa020c23cafcc
SHA1

3e1164fc3f94ec9c8dc2a2db77928599661b7948
SHA256

51e7124608e523bc1ff0d622f80d774d1b88674d1f8ae0b98c3cb651a20065bf
SHA512

0ac57459a1f136a9cd0794b39ec13b60446101c02889463d501b80e3e77b82adcb7a698a605a3e5a8b621dff280f608e6a031898280a1af07bd97a5f6fc6def0
SSDEEP

1536:NXrIsNu5nfuegiAR0l+VBLcskgQ8rJyUvn8rP5zek9O:5u5nlgLY+VBHNyUv8j5N9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cad910d8c8b65af4377aa020c23cafcc

Files

cad910d8c8b65af4377aa020c23cafcc
.exe windows:4 windows x86 arch:x86

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
VirtualAllocEx
GetLocalTime
GetCurrentThreadId
FreeResource
FreeLibrary
LockResource
SetErrorMode
HeapDestroy
GetDiskFreeSpaceA
SetLastError
MulDiv
GetSystemDefaultLangID
lstrlenW
HeapFree
DeleteCriticalSection
WriteFile
RaiseException
ExitThread
VirtualQuery
GetLocaleInfoA
GetCurrentThread
EnterCriticalSection
GetStringTypeA
CompareStringA
WideCharToMultiByte
SetFilePointer
ExitProcess
GetCurrentProcess
GetEnvironmentStrings
GetFileAttributesA
SizeofResource
lstrcmpA
GetProcAddress
GetDateFormatA
IsBadReadPtr
FindFirstFileA
DeleteFileA
GetProcessHeap
GetACP
lstrcmpiA
VirtualAlloc
Sleep
LoadLibraryA
LocalFree
CloseHandle
MoveFileA
GetFileType
GetCommandLineW
GetModuleFileNameA
LocalAlloc
GetVersion
IsBadHugeReadPtr

comctl32

ImageList_Create
ImageList_Remove
ImageList_DragShowNolock
ImageList_Read
ImageList_Write
ImageList_DrawEx

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyA

user32

GetSysColorBrush
EnumWindows
EnumChildWindows
EnumThreadWindows
EqualRect
IsMenu
IsWindowUnicode
GetTopWindow
GetMenu

Exports

Exports

C5qSGKpfTdU5
sDuYdoPMPjjB
_QqlHS35B02
0xb0Tx41AKF
_ZF_wRE@20
aLk_L8_GD6
_NBjQaLhwzI9
_nYszemP@16
__R2ziurxzA
4BMsc_N7i
_iwoS9ov
_eIWNcR_mDoZa@24
8dFYC0a4Ir@20
SHqA55koqKdxZG@4
lXCjjKJk@12
_ddb1zvQZ_cd
_Ti4vPwrxwQkJ
WZXRQ5vEf@4
_Nc8bnoPxE@12
q19DVv9@8
dyR2hgPu_e
_rKBor5EC1lE81N
kKnJA9CxBlRCez@12
_p6otO@12
xjwajE5@4
_eF5lzWpaPq@8
_BchRkFe_y
_ANK_smmfDmuV
_IheDaI4MFgMz6
PwTwbT_s67ucgd
p4BSuSF2S8@20
_nbrNeIq1@8
_uDW4MOF_@16
oGYHT9fJ
_pA514@4
_qwv_Ct@8
_7N2OutJOARQ7D
_nWoEj4pGwxJD@20
_muUis
SC8x5HWwd
G4dJwWtp9ViA@4
JmrSht2
_sOkGOe6jJ@8
_TL3W1@4
WSAEIrj7@4
_yaIjVkH9BJ
wUx1Gu8
urSsHrkyOuPX
FJ_lY84NdLSxm0
_1A4A60RC
_4RN0HyTOZ
_lhniUvM
F3SxCUHomPO@12
_PVNEK6iWf9L@12
6BHpcfMkWIOj
_nPanqGvmsP1IE
ktbgpaRMu3@24
_CATF580
9jgjE_vx_W
_RrzLrQz@24
_Jf5Q0OlMbcifj
rHrFAGtzH@16
_G2uuLSt6FTH2@8
_v6gontFSI@24
_3C1Zfq@4

Sections

CODE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kudata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e11c664c20d5e0418f109c9ac1dfe33

Headers

File Characteristics

Imports

kernel32

comctl32

advapi32

user32

Exports

Exports

Sections

CODE Size: 28KB - Virtual size: 28KB

.DATA Size: 10KB - Virtual size: 9KB

.kudata Size: 51KB - Virtual size: 50KB

.idata Size: 2KB - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 28KB - Virtual size: 28KB

.DATA
Size: 10KB - Virtual size: 9KB

.kudata
Size: 51KB - Virtual size: 50KB

.idata
Size: 2KB - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB