a4a6545d3bcb4f40a23db4aad3b6d359e41c7d1785cdf066a54ebd5efbea29f3

General

Target

a4a6545d3bcb4f40a23db4aad3b6d359e41c7d1785cdf066a54ebd5efbea29f3
Size

104KB
MD5

ef295727fd621c013c558b1331ee6caa
SHA1

78acba0ed2af060bb215f9634cd42dcd30235fae
SHA256

a4a6545d3bcb4f40a23db4aad3b6d359e41c7d1785cdf066a54ebd5efbea29f3
SHA512

12466dd8353378dd83084e42512555450ce3defadba2e1a54c1545bd63ca0696e0834fcba63d4b0f2e6101c68f3d1034f29684daf8fde5a96a9b7ab3ede131db
SSDEEP

3072:PG4NpvD/a4AH57eDe1Z8sXwXJNmx3CzXL5Y11:PG4tzDqZZyNm4Z01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/MATRIX/MATRIX.SCR

Files

a4a6545d3bcb4f40a23db4aad3b6d359e41c7d1785cdf066a54ebd5efbea29f3
.zip
MATRIX/MATRIX.SCR
.exe windows:4 windows x86 arch:x86

67f9218fdf7dd4159ec035c7eeed5536

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
TranslateMessage
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
ShowCursor
FindWindowA
GetSystemMetrics
SendMessageA
DefWindowProcA
SetTimer
EndDialog
BeginPaint
EndPaint
GetWindowRect
SetWindowPos
GetDlgItem
SetWindowTextA
LoadBitmapA
GetDlgItemInt
GetDC
ReleaseDC
DestroyWindow
PostQuitMessage
DispatchMessageA
DialogBoxParamA

gdi32

SetTextColor
GetTextMetricsA
SetBkColor
GetStockObject
TextOutA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

kernel32

GetCurrentProcess
TerminateProcess
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
CloseHandle
UnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67f9218fdf7dd4159ec035c7eeed5536

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 174KB

.rsrc Size: 248KB - Virtual size: 247KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 174KB

.rsrc
Size: 248KB - Virtual size: 247KB