581d9b05126624b4522346593af4e48f97e860640c0989fe49357b7a3ed76286

General

Target

581d9b05126624b4522346593af4e48f97e860640c0989fe49357b7a3ed76286
Size

76KB
MD5

f6a1f18d363bca3e5b156b65082b7d09
SHA1

3c53ced2745a631c0f3c474572fbb491f67d8485
SHA256

581d9b05126624b4522346593af4e48f97e860640c0989fe49357b7a3ed76286
SHA512

db1b4812946500afd700a61f36167e48d15ab10fc298c14be4fa476e356717750f60fc2ed7681f57710c1ff365379c246720cf27ddcac16879c4d7b97242b7f5
SSDEEP

1536:kyUwt6qAqlIUA2xwUy98NVhJ+CuDimIF7ubt5MsRRR:kyrt6rMA2xE+dmIFSbt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
581d9b05126624b4522346593af4e48f97e860640c0989fe49357b7a3ed76286

Files

581d9b05126624b4522346593af4e48f97e860640c0989fe49357b7a3ed76286
.exe windows:4 windows x86 arch:x86

10d8c0b407d44acbccea26f26a61073d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadImageA
DrawEdge
GetMessageW
InsertMenuW
wsprintfA
MessageBoxExA
CreateWindowExA
DialogBoxParamW
CharToOemW
SetFocus
IsDialogMessageW
CreateDialogParamA
DrawTextExA
SetParent
DefDlgProcA
LoadBitmapA
PostMessageA

odbctrac

TraceSQLCancel
TraceSQLError
TraceSQLConnect
TraceSQLFetch

esent

JetCloseTable
JetCloseDatabase
JetCloseFile
JetCommitTransaction
JetBeginTransaction

crypt32

CryptEnumOIDInfo
CertFindChainInStore
CertAddStoreToCollection
CertDuplicateStore
CertFindExtension
CertFreeCRLContext
CertAlgIdToOID
CertCompareCertificate
CertFindAttribute
CertCreateCRLContext
CryptFindOIDInfo
CertNameToStrA

uxtheme

DrawThemeBackground
DrawThemeEdge
GetThemeSysSize
GetThemeTextMetrics
OpenThemeData
GetThemeInt
IsThemeActive
GetThemeBool
SetWindowTheme
GetWindowTheme
GetThemeColor
GetThemeTextExtent

kernel32

CreateWaitableTimerW
GetLogicalDriveStringsA
CreateDirectoryW
GetProcAddress
ReadConsoleA
GetDateFormatA
ReadFile
WaitForSingleObjectEx
GetCurrentDirectoryW
GetLocaleInfoW
GetACP
DeleteFileA
FileTimeToSystemTime
Sleep
GetOEMCP
GetLocalTime
GetFileSize
ReplaceFileW
GetModuleHandleA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d8c0b407d44acbccea26f26a61073d

Headers

File Characteristics

Imports

user32

odbctrac

esent

crypt32

uxtheme

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 23KB