d3e2cc45857836b07656a7bb991e2d82

Sharing

Copy URL

Twitter E-mail

General

Target

d3e2cc45857836b07656a7bb991e2d82
Size

212KB
MD5

d3e2cc45857836b07656a7bb991e2d82
SHA1

a48273989772edaef2a20662bf6f8934416f7151
SHA256

73fb481c22d58a2eb3d47ab828f8bea575ed63abef1ec33233fa7f9ffbcedb17
SHA512

1bc2f5b374cad1ca78a50678e69f4fda8c5213723dc1309ea221b08d3608aecd1f05cd271c3cfd516d9a0d35719f9ffe0b3eeaf97dda7b7291f6039deb5bce82
SSDEEP

3072:WWFdwDITjPe0s7yocbT3jmLUX3rMqID4aFFb8Be02YvnKyqzavSxtqFUO30q:bjPej7yoCzUO7aUdfdvS0UOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e2cc45857836b07656a7bb991e2d82

Files

d3e2cc45857836b07656a7bb991e2d82
.exe windows:4 windows x86 arch:x86

518b00385bc5f9d4412df81cde6be5dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumValueA

user32

GetFocus
ShowWindow
MessageBoxA
GetCursorPos

kernel32

ExitThread
GetACP
LoadLibraryA
VirtualAlloc
lstrcatA
GetProcAddress
GetFullPathNameA
LocalAlloc
CompareStringA
GetVersionExA
SetFilePointer
LockResource
LoadResource
ExitProcess
VirtualAllocEx
RaiseException
GetCurrentProcessId

ole32

CoCreateGuid
CoUninitialize
PropVariantClear
MkParseDisplayName
CLSIDFromString
CoTaskMemFree
OleCreateStaticFromData
ReleaseStgMedium

comdlg32

GetFileTitleA
GetSaveFileNameA
FindTextA
ChooseColorA
GetOpenFileNameA

shell32

DragQueryFileA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA

Sections

.text
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

518b00385bc5f9d4412df81cde6be5dc

Headers

File Characteristics

Imports

advapi32

user32

kernel32

ole32

comdlg32

shell32

Sections

.text Size: 109KB - Virtual size: 112KB

.rdata Size: 4KB - Virtual size: 4KB

DATA Size: 65KB - Virtual size: 68KB

BSS Size: 12KB - Virtual size: 12KB

.edata Size: 1KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

text Size: 512B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

INIT Size: 512B - Virtual size: 4KB

.rsrc Size: 17KB - Virtual size: 20KB

.text
Size: 109KB - Virtual size: 112KB

.rdata
Size: 4KB - Virtual size: 4KB

DATA
Size: 65KB - Virtual size: 68KB

BSS
Size: 12KB - Virtual size: 12KB

.edata
Size: 1KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

text
Size: 512B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

INIT
Size: 512B - Virtual size: 4KB

.rsrc
Size: 17KB - Virtual size: 20KB