d4d703c387410b711501001bfb01d7ec

General

Target

d4d703c387410b711501001bfb01d7ec
Size

51KB
MD5

d4d703c387410b711501001bfb01d7ec
SHA1

df960de7395bf5ea3839b814f366325aa15f5f22
SHA256

c8e75ded89087f77860d1dca341063cb47330c0a6df67a99779c6a54dc1d1b4a
SHA512

0713c2270ffb4a748ab62e3e1f24bcfa0db06ddc741d4fe615a2e297f30ce1a12508ed0efead90b758496e12a0021afd3f1cfd58ad5597a9310a2adb5a1a76af
SSDEEP

1536:Ie498OMqfc7U1/bTWC6IeAN/RK8i237ai:d4BMqfo0jKCLR0k7a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4d703c387410b711501001bfb01d7ec

Files

d4d703c387410b711501001bfb01d7ec
.exe windows:4 windows x86 arch:x86

80ea46f0354598eba3381a8d983417cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoTaskMemFree
OleRegGetMiscStatus
CoRegisterMallocSpy
OleFlushClipboard
CoIsHandlerConnected
OleDraw
CoMarshalInterface
CoGetStandardMarshal
CoLockObjectExternal
CoGetStdMarshalEx
OleCreateMenuDescriptor

advapi32

GetLengthSid
LookupPrivilegeNameA
RegConnectRegistryA
RegQueryValueExA
LookupPrivilegeValueW
SetKernelObjectSecurity
MapGenericMask
IsValidSid
GetSecurityInfo
GetAce

msvcrt

strrchr
strcspn
realloc
_strcmpi
__set_app_type
wcscpy
_onexit
strcat
_wctime
_snprintf
_controlfp

user32

CreateWindowExA
CheckRadioButton
GetFocus
GetClassNameA
DrawIconEx
FillRect
GetMenuCheckMarkDimensions
SendMessageA
GetMenuItemCount
EndDeferWindowPos
LoadImageA

kernel32

HeapSize
GetCommandLineA
ExitProcess
GetVersionExA
FormatMessageA
TlsGetValue
LeaveCriticalSection
lstrlenW
OutputDebugStringA
HeapReAlloc
GetStartupInfoA
GetTimeZoneInformation
SetEndOfFile
lstrlenA

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 799B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80ea46f0354598eba3381a8d983417cf

Headers

File Characteristics

Imports

ole32

advapi32

msvcrt

user32

kernel32

Sections

.text Size: 47KB - Virtual size: 46KB

.data Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 799B

.text
Size: 47KB - Virtual size: 46KB

.data
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 799B