e12b2d9c5712863452af20c16e01719f

General

Target

e12b2d9c5712863452af20c16e01719f
Size

36KB
MD5

e12b2d9c5712863452af20c16e01719f
SHA1

996e53efba270090a42ee70e08138cc250357db4
SHA256

41e99ebd01da10838d433cbbe680acdd1e3c5300a5a688bd7b4c15aaf4782280
SHA512

85e3af0b684db4c86c9617844c953eec68ae2d9f850b62ff8508b5befdcccd9556679e04561e46f31d45365127fe5768da516f5e621823164262937de786f83c
SSDEEP

768:Fp8yoWwicVGtPP1Day9shx7JK4xy69lsH/x:H8yoWNBNDaymHRxy6LsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e12b2d9c5712863452af20c16e01719f

Files

e12b2d9c5712863452af20c16e01719f
.exe windows:4 windows x86 arch:x86

c35ebeb18401b9308000e9c6cbb9a3ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
DeleteFileA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
GetLastError
ExitThread
lstrcatA
CreateEventA
Sleep
GetProcessHeap
WaitForSingleObject
FreeLibrary
CreateFileA
PulseEvent
ResetEvent
WaitForMultipleObjects
HeapAlloc
HeapFree
ExitProcess
SetEvent
CreateThread
WriteFile
LoadResource
FindResourceA
CompareStringA
Process32First
CreateToolhelp32Snapshot
lstrlenA
lstrcmpA
RtlUnwind

user32

DestroyWindow
DispatchMessageA
TranslateMessage
CreateWindowExA
PeekMessageA
MsgWaitForMultipleObjects
EndPaint
wsprintfA
BeginPaint
AnyPopup
GetForegroundWindow
GetDesktopWindow
ShowWindow

advapi32

RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoInitialize
CoUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c35ebeb18401b9308000e9c6cbb9a3ca

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 968B

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 968B

.rsrc
Size: 22KB - Virtual size: 22KB