edb79fe2ad652e5b46acf1d90a6566ed712dbafabe4038c5f78d6e2ef8816dce

General

Target

edb79fe2ad652e5b46acf1d90a6566ed712dbafabe4038c5f78d6e2ef8816dce
Size

20KB
MD5

a8f3aa7d1a9a8ff0e15b9fbbbfeb8642
SHA1

a686f8b96b324848c8a03deb6754437396df7b5a
SHA256

edb79fe2ad652e5b46acf1d90a6566ed712dbafabe4038c5f78d6e2ef8816dce
SHA512

98e67bc67f52c8e75d21adc299fe2d8efc72a66ea167006447a2ddf3e332c36c103c7d85016ff6d13e16522e7b610d28ebe4c05bfd761bd13eccfe7659598c5f
SSDEEP

384:UItlYLkfSoxGMwIfUzAI7+U5Q1dg1T8FspEK8PfOmm98:U+CLZoyIm5HIFDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edb79fe2ad652e5b46acf1d90a6566ed712dbafabe4038c5f78d6e2ef8816dce

Files

edb79fe2ad652e5b46acf1d90a6566ed712dbafabe4038c5f78d6e2ef8816dce
.exe windows:5 windows x86 arch:x86

7f712f2a919df3038830bf06da63a3d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
GetForegroundWindow
SetForegroundWindow
CreateMenu
GetSystemMenu
GetDoubleClickTime
UpdateWindow
GetQueueStatus
GetClipboardOwner
FindWindowA
LoadIconA
LoadCursorA
RegisterClassA

gdi32

CreateBitmap
IntersectClipRect
ExcludeClipRect
UpdateColors
DeleteDC
GetTextExtentPoint32A
CreateCompatibleDC
DeleteObject
TextOutA
SetBkColor
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
SelectObject
CreateFontIndirectA
GetTextExtentExPointA
SetMapMode
GetDeviceCaps
GetTextMetricsA
CreateFontA
RealizePalette

winmm

mciSendStringA

msacm32

acmStreamOpen

imm32

ImmGetCompositionStringW
ImmSetCompositionFontA
ImmGetContext
ImmSetCompositionWindow

kernel32

GetModuleHandleA
CreateSemaphoreW
GetProcAddress
HeapCreate
HeapAlloc
ExitProcess
FreeLibrary

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f712f2a919df3038830bf06da63a3d5

Headers

File Characteristics

Imports

user32

gdi32

winmm

msacm32

imm32

kernel32

ole32

Sections

.text Size: 3KB - Virtual size: 3KB

.data Size: 5KB - Virtual size: 5KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 3KB - Virtual size: 3KB

.data
Size: 5KB - Virtual size: 5KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 6KB