d75d22f348c556ebf879718dff395e2d

General

Target

d75d22f348c556ebf879718dff395e2d
Size

287KB
MD5

d75d22f348c556ebf879718dff395e2d
SHA1

791991e56f09cda074b9e2988cf48d1a80e44501
SHA256

75e83cfb0a229b86c121ca39556016c4952a7e42c77cf4598024e1ee3edd4d1a
SHA512

75806b3f248cd55ca3b6fe1838ffdaa38afa8d8bd26362e98fea3ebccdf75686666fd9a51df4a6b13af67bf259d52ad69292cd74d12aa153411f9b167f9fc890
SSDEEP

6144:0OGiPrfNG08ItCbVRH78v4/9Z2D9ZXsrCAGhIjAkPXNR:nPrFt68bachrk/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d75d22f348c556ebf879718dff395e2d

Files

d75d22f348c556ebf879718dff395e2d
.exe windows:4 windows x86 arch:x86

fbf258b61042e2e1c2db9008befed006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

StrRetToStrA
PathIsFileSpecA
PathAppendA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathCreateFromUrlW

kernel32

lstrlenA
GetCurrentProcess
InterlockedDecrement
GlobalFree
GetModuleFileNameW
FindAtomW
Sleep
SetLastError
CreateFileW
CreateThread
GetLocaleInfoW
InterlockedExchange
GlobalHandle
FlushInstructionCache
FormatMessageW
GetProcessId
EnterCriticalSection
InitializeCriticalSection
lstrlenW
GetTickCount
EnumResourceLanguagesW
LeaveCriticalSection
HeapSetInformation
GlobalAlloc
CloseHandle
ProcessIdToSessionId
MultiByteToWideChar
lstrcmpW
LocalAlloc
DeleteCriticalSection
GlobalLock
GetStringTypeW
OpenProcess
WaitForMultipleObjects
RaiseException
GlobalUnlock
MulDiv
GetSystemDirectoryW
WaitForSingleObject
InterlockedIncrement
GetComputerNameW
WideCharToMultiByte

oleacc

CreateStdAccessibleObject

Sections

.text
Size: 148KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbf258b61042e2e1c2db9008befed006

Headers

File Characteristics

Imports

shell32

shlwapi

kernel32

oleacc

Sections

.text Size: 148KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 148KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 512B - Virtual size: 4KB