04bc0b3885028f62523c07a87a2fa0b12db6e6ad2ff81ec0ac8b8b897cdec658

Sharing

Copy URL

Twitter E-mail

General

Target

04bc0b3885028f62523c07a87a2fa0b12db6e6ad2ff81ec0ac8b8b897cdec658
Size

4.7MB
MD5

273fdbb9254945f9f82dd4267814c7dc
SHA1

5fd7be9a9967b44aa258397639241260d106a4ba
SHA256

04bc0b3885028f62523c07a87a2fa0b12db6e6ad2ff81ec0ac8b8b897cdec658
SHA512

0c30bfc45a2338012814dadc7ea8e8e8b7a49bdcaab7920655f334cc6d30a0242f245b5513c19fc0fbb0eaf0ecbd2df5c424f600694f6e2e01b7bc939667aae1
SSDEEP

98304:N4hHla7AM9QXv8izlsIykxbZGjK/UCTl:N4baMhRs24ZCT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04bc0b3885028f62523c07a87a2fa0b12db6e6ad2ff81ec0ac8b8b897cdec658

Files

04bc0b3885028f62523c07a87a2fa0b12db6e6ad2ff81ec0ac8b8b897cdec658
.exe windows:5 windows x86 arch:x86

5b5285c0dbf5181ed3b59bb0b087467e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetWindowLongW

gdi32

IntersectClipRect

comdlg32

GetSaveFileNameA

shell32

ShellExecuteW

ole32

CLSIDFromProgID

oleaut32

GetErrorInfo

ws2_32

setsockopt

shlwapi

StrToIntExW

imm32

ImmReleaseContext

gdiplus

GdipSaveImageToFile

usp10

ScriptItemize

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t0
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t1
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 543KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b5285c0dbf5181ed3b59bb0b087467e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

oleaut32

ws2_32

shlwapi

imm32

gdiplus

usp10

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 647KB

.data Size: - Virtual size: 161KB

.tls Size: 512B - Virtual size: 2B

.t0 Size: - Virtual size: 4.1MB

.t1 Size: 4.6MB - Virtual size: 4.6MB

.reloc Size: 512B - Virtual size: 308B

.rsrc Size: 37KB - Virtual size: 543KB

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 647KB

.data
Size: - Virtual size: 161KB

.tls
Size: 512B - Virtual size: 2B

.t0
Size: - Virtual size: 4.1MB

.t1
Size: 4.6MB - Virtual size: 4.6MB

.reloc
Size: 512B - Virtual size: 308B

.rsrc
Size: 37KB - Virtual size: 543KB