2a1f4bae3fcc820037a469773ca970d6a859dac839d9ddeaf465e7334541b333

General

Target

2a1f4bae3fcc820037a469773ca970d6a859dac839d9ddeaf465e7334541b333
Size

137KB
MD5

b43c515c76c4fd60ec74201e0117b46b
SHA1

b5508c1333a63bf2f05515ce3fd2402cb7cf3082
SHA256

2a1f4bae3fcc820037a469773ca970d6a859dac839d9ddeaf465e7334541b333
SHA512

057ecb4fb273d8bc8eb9ea91e78a112f4eecf91d8ce0048d624be96777b95e58cb65372b71a901204a607ae759195ea856d2436d29bce82995bc31ec051e49c2
SSDEEP

3072:9/eOrj+K1j+stAo7jpD73KvTYEIQkeJMm:FBlAQd3eCQTJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a1f4bae3fcc820037a469773ca970d6a859dac839d9ddeaf465e7334541b333

Files

2a1f4bae3fcc820037a469773ca970d6a859dac839d9ddeaf465e7334541b333
.exe windows:4 windows x86 arch:x86

406e9620195118da1a72280c65e8babe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
LoadLibraryA
LocalAlloc
LocalFree
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcpyA
lstrlenA

shell32

SHGetFolderPathW

user32

GetDC
GetDlgItem
GetSysColor
GetWindowLongA
GetWindowRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
RegisterClassW
SendMessageA
SetWindowLongA
ShowWindow
MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

gdi32

SelectObject

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 113KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

406e9620195118da1a72280c65e8babe

Headers

File Characteristics

Imports

kernel32

shell32

user32

advapi32

gdi32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 113KB - Virtual size: 359KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 632B

.reloc Size: 512B - Virtual size: 376B

.htext Size: 8KB - Virtual size: 8KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 113KB - Virtual size: 359KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 632B

.reloc
Size: 512B - Virtual size: 376B

.htext
Size: 8KB - Virtual size: 8KB