479921ba5eeee4ab662cdcf7f1ba376091f797a80fec4fdf04278288c6f1d0da

General

Target

479921ba5eeee4ab662cdcf7f1ba376091f797a80fec4fdf04278288c6f1d0da
Size

45KB
MD5

58c72dc84818d04a45e3d8d1468c481b
SHA1

406f0074d8f431f9fb6e923cc1d12b5b3a826e8e
SHA256

479921ba5eeee4ab662cdcf7f1ba376091f797a80fec4fdf04278288c6f1d0da
SHA512

745e79907c8078ff62b1717ac26a528bf02fab202bab907219b6071839605e83fb30d6877a83fef0fcc09b8841ef69ec7d3e8d8c0a3fa150300459d552384c5f
SSDEEP

768:P2IX56DsW6lJm7ZsIbGNDfTpD8oHMQ7ItarPL3k/zyKVhaCB4C5g86mIDMB:PZ09/7ZsPJl89Q1vk7yKlBL36dMB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/my_photo_238473289472398749823.exe

Files

479921ba5eeee4ab662cdcf7f1ba376091f797a80fec4fdf04278288c6f1d0da
.zip
my_photo_238473289472398749823.exe
.exe windows:4 windows x86 arch:x86

10d8c0b407d44acbccea26f26a61073d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadImageA
DrawEdge
GetMessageW
InsertMenuW
wsprintfA
MessageBoxExA
CreateWindowExA
DialogBoxParamW
CharToOemW
SetFocus
IsDialogMessageW
CreateDialogParamA
DrawTextExA
SetParent
DefDlgProcA
LoadBitmapA
PostMessageA

odbctrac

TraceSQLCancel
TraceSQLError
TraceSQLConnect
TraceSQLFetch

esent

JetCloseTable
JetCloseDatabase
JetCloseFile
JetCommitTransaction
JetBeginTransaction

crypt32

CryptEnumOIDInfo
CertFindChainInStore
CertAddStoreToCollection
CertDuplicateStore
CertFindExtension
CertFreeCRLContext
CertAlgIdToOID
CertCompareCertificate
CertFindAttribute
CertCreateCRLContext
CryptFindOIDInfo
CertNameToStrA

uxtheme

DrawThemeBackground
DrawThemeEdge
GetThemeSysSize
GetThemeTextMetrics
OpenThemeData
GetThemeInt
IsThemeActive
GetThemeBool
SetWindowTheme
GetWindowTheme
GetThemeColor
GetThemeTextExtent

kernel32

CreateWaitableTimerW
GetLogicalDriveStringsA
CreateDirectoryW
GetProcAddress
ReadConsoleA
GetDateFormatA
ReadFile
WaitForSingleObjectEx
GetCurrentDirectoryW
GetLocaleInfoW
GetACP
DeleteFileA
FileTimeToSystemTime
Sleep
GetOEMCP
GetLocalTime
GetFileSize
ReplaceFileW
GetModuleHandleA

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d8c0b407d44acbccea26f26a61073d

Headers

File Characteristics

Imports

user32

odbctrac

esent

crypt32

uxtheme

kernel32

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 4KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 24KB - Virtual size: 23KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 4KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 24KB - Virtual size: 23KB