d7ac32cf49a449ad54f7bb22165e4ed8

Sharing

Copy URL Twitter E-mail

General

Target

d7ac32cf49a449ad54f7bb22165e4ed8
Size

185KB
MD5

d7ac32cf49a449ad54f7bb22165e4ed8
SHA1

78bb42ef8630dcf3b35556c4914432ad3427d2f1
SHA256

79f603785bd788672488a9531ef47e958cf6797b9ac5cb5fbc9dfb33479ef483
SHA512

b15dddf89e48313147280c5fd4f6e466f82bb381be32324832f6c8f8e347c18df2241b5c6ce694a83e6ca61e7d9d7dbbc9dd2a26a352cb43a4c37a98fc099a41
SSDEEP

3072:JZ9UoFYyqlt95mHr04eSZnLEzY0OBJz8E9UJuntlNFTM:DPYJbeLDpZh0OBJIkcut7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7ac32cf49a449ad54f7bb22165e4ed8

Files

d7ac32cf49a449ad54f7bb22165e4ed8
.exe windows:4 windows x86 arch:x86

35a5e56c53771e638bc13be01bdac502

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegLoadKeyA

ole32

PropVariantClear
ReleaseStgMedium
StgCreateDocfileOnILockBytes
CLSIDFromString

oleaut32

SafeArrayUnaccessData
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayPtrOfIndex
SysFreeString
SafeArrayCreate
VariantChangeType
SysReAllocStringLen
VariantCopyInd
OleLoadPicture
SysAllocStringLen

msvcrt

asin
tolower
atan
memset
mbstowcs
strlen
memcmp
pow
memcpy
memcmp

version

VerInstallFileA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA

shell32

SHFileOperationA
SHGetDiskFreeSpaceA

kernel32

GetCommandLineA
GetModuleHandleA
LoadLibraryExA
GetLastError
GetProcAddress
IsBadHugeReadPtr
ExitProcess
lstrlenA
Sleep
VirtualAlloc
ExitThread
CloseHandle
VirtualAllocEx

comctl32

ImageList_Write
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Draw
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_GetBkColor
ImageList_Remove
ImageList_Read

gdi32

SaveDC
CreateFontIndirectA
GetClipBox
SelectObject
GetPixel

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx

shlwapi

SHGetValueA
SHQueryInfoKeyA
PathIsContentTypeA
SHEnumValueA
PathFileExistsA
SHDeleteKeyA
SHStrDupA
PathIsDirectoryA
SHDeleteValueA

comdlg32

ChooseColorA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35a5e56c53771e638bc13be01bdac502

Headers

File Characteristics

Imports

advapi32

ole32

oleaut32

msvcrt

version

shell32

kernel32

comctl32

gdi32

user32

shlwapi

comdlg32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 1024B - Virtual size: 88KB

.data Size: 8KB - Virtual size: 7KB

.fdata Size: 1024B - Virtual size: 670B

.cdata Size: 123KB - Virtual size: 122KB

.bdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 980B

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 1024B - Virtual size: 88KB

.data
Size: 8KB - Virtual size: 7KB

.fdata
Size: 1024B - Virtual size: 670B

.cdata
Size: 123KB - Virtual size: 122KB

.bdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 980B