d5c44a29e1c07afb8f788093e0956118

Sharing

Copy URL Twitter E-mail

General

Target

d5c44a29e1c07afb8f788093e0956118
Size

193KB
MD5

d5c44a29e1c07afb8f788093e0956118
SHA1

35425447eb5953f69431e1762ddaa44bf98f2a28
SHA256

e1096cbb83f48431df028a6e3e6d5ee477d30a77d5ff1604d9cd62544c53a23f
SHA512

e7ec46fe0a5cf68bf943f830ef32dad0a187554a3c6c977e2ada96de6cf23592104762b25d1d04f8f41edfd7d5a9ac4884f12e58eb322516290a2520bf892cce
SSDEEP

6144:7OTMMIjf8uQ8mPgjZqatFpZw7+G9kZGrs/zG6:KTMMUf8v2qatVwaAk0QG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c44a29e1c07afb8f788093e0956118

Files

d5c44a29e1c07afb8f788093e0956118
.exe windows:4 windows x86 arch:x86

b38b00e098d8c90c6e4485d00fe01a03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

winmm

mciSendCommandA
sndPlaySoundA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

ole32

ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

user32

GetWindowInfo
GetDC
LoadCursorA
GetSysColor
ReleaseDC
SetWindowLongA
FillRect
ReleaseCapture
GetWindowLongA
SetCursor
IsWindow
GetDlgItem
SetWindowPos
MoveWindow
SetCapture

gdi32

GetTextExtentPoint32A
CreateRectRgn
SetTextColor
DeleteObject
SaveDC
RestoreDC
SelectObject
SetBkMode
GetObjectA
CreateCompatibleDC
DeleteDC
TextOutA
DeleteMetaFile
CreateSolidBrush
Rectangle
BitBlt
GetStockObject
GetDeviceCaps
EnumFontFamiliesExA
CreateFontIndirectA
CreateCompatibleBitmap

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

SetTapeParameters
GetLocalTime
ClearCommError
FindClose
GetWindowsDirectoryA
GetCurrentProcessId
Sleep
EnumResourceNamesA
InterlockedExchange
ExitProcess
GetVersion
FindFirstFileA

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b38b00e098d8c90c6e4485d00fe01a03

Headers

File Characteristics

Imports

oleacc

winmm

shell32

ole32

version

user32

gdi32

advapi32

kernel32

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 20KB

.lib Size: 512B - Virtual size: 224KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 20KB

.lib
Size: 512B - Virtual size: 224KB