cd637f5367cb507c5b7c44acdbf966cc

General

Target

cd637f5367cb507c5b7c44acdbf966cc
Size

59KB
MD5

cd637f5367cb507c5b7c44acdbf966cc
SHA1

a5268278c335204859000a8046a7a8bfe3ea0eac
SHA256

fb64fe14e0e8df8d941098a6b204562032310c27fa3eca26bbb6c73ccaebee26
SHA512

8e928f8c3488c5e4a4e82db14d4bbe855cf97c6fba8c9ec13e8e2fd731dc2e6aaf8be7839d91cf2eef2719660b5d7716c4ef4179510d601e5a5721b6cc50f558
SSDEEP

1536:7zS/mpwHtuZ37vtQ3tbmlMRZ4YyeXG8vJdnaP9VMGjZT:FpV37vtQ3hjgeTvnaVVMSZT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd637f5367cb507c5b7c44acdbf966cc

Files

cd637f5367cb507c5b7c44acdbf966cc
.exe windows:4 windows x86 arch:x86

61a2ac557d283fec0a930f706dcbe150

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptDestroyHash
CryptReleaseContext
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
CryptHashData
CryptAcquireContextW
CryptCreateHash
RegDeleteValueA
RegCreateKeyExA
CryptGetHashParam
RegSetValueExA
GetUserNameW

shlwapi

PathFindFileNameW
StrCmpNIW
PathCombineW
SHDeleteKeyA
StrCmpNIA
PathMatchSpecW
wnsprintfW
wvnsprintfW
wvnsprintfA
wnsprintfA

user32

SetProcessWindowStation
ToUnicode
MsgWaitForMultipleObjects
GetCursorPos
GetIconInfo
GetClassNameA
GetKeyState
FindWindowExA
GetDlgItemTextA
PeekMessageA
SetThreadDesktop
CloseWindowStation

kernel32

GetModuleHandleA
ReleaseMutex
WaitForSingleObject
SystemTimeToFileTime
LoadLibraryA
VirtualAlloc
VirtualProtect
Sleep
GlobalUnlock
GetUserDefaultUILanguage
CreateProcessW
GetLocalTime
GetDiskFreeSpaceW
CreateFileA
GetTimeZoneInformation
InitializeCriticalSection
GetAtomNameW
GetEnvironmentVariableW
lstrcmpiA
GetModuleFileNameW
lstrcpynW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

61a2ac557d283fec0a930f706dcbe150

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shlwapi

user32

kernel32

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 24KB

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 24KB