cb6d46e0965d91f19bd4175c99cf380a

General

Target

cb6d46e0965d91f19bd4175c99cf380a
Size

84KB
MD5

cb6d46e0965d91f19bd4175c99cf380a
SHA1

e976bef9930a01425700ea39bc9d98a9d1e7ef0c
SHA256

f741e2077d8a04a56aa676ca92b687d05fe41cc4e33d78a4682fade09c77e2a5
SHA512

74dd427469dee2cb204fa8b7a02a0bd7bd924b3ff88b3aafec70961ec1b1d3f28adb91d15dc535b8c658a24d2d5ae484255b79afdaab6688757548c9ca7a376a
SSDEEP

1536:0tw28Pc3Wdz6NrKqzy3ulB3gFufn7aFk73IRejTL0TFd1/1:H2oc3LcqsqBMKWtATwHN1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb6d46e0965d91f19bd4175c99cf380a

Files

cb6d46e0965d91f19bd4175c99cf380a
.exe windows:4 windows x86 arch:x86

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegEnumValueA
RegReplaceKeyW
RegOpenKeyExA
RegFlushKey
RegEnumKeyA
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExW

kernel32

GetStdHandle
CopyFileA
OpenFile
GetCommandLineA
CopyFileW
CopyFileExW
CopyFileExA
ExitThread
SetLastError
CreateDirectoryA
ReadConsoleA
CreateProcessA
OpenFileMappingA
FindFirstFileA
GetFileTime
GlobalFree
GetLastError
DeleteFileA
DeleteAtom

comctl32

ImageList_EndDrag
ImageList_AddMasked
ImageList_Replace
ImageList_Create
ImageList_Copy
ImageList_AddIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageW
ImageList_LoadImage
ImageList_GetImageCount
ImageList_Merge
ImageList_LoadImageA
ImageList_DragEnter
ImageList_Remove
ImageList_BeginDrag

user32

LoadCursorA
LoadMenuA
DrawIconEx
IsWindow
DialogBoxParamA
CopyIcon
CloseWindow
DialogBoxParamW
GetDlgItem
GetDC
BlockInput
GetWindowTextLengthA
CalcMenuBar
DrawTextA
CopyRect
InsertMenuA
AppendMenuW
GetFocus
CopyImage

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0a7a80747795279a583a6dce14622ad

Headers

File Characteristics

Imports

advapi32

kernel32

comctl32

user32

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 64KB - Virtual size: 131KB

.reloc Size: - Virtual size: 20B

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 64KB - Virtual size: 131KB

.reloc
Size: - Virtual size: 20B

.rsrc
Size: 4KB - Virtual size: 1KB