05b3ed23b766959d2b151deaf3768a5237c58f0fd5dd8872142da405e01b6c13

Sharing

Copy URL Twitter E-mail

General

Target

05b3ed23b766959d2b151deaf3768a5237c58f0fd5dd8872142da405e01b6c13
Size

203KB
MD5

7e1bcf981493a87b571f0996bb041082
SHA1

8c09229abafea8d2a748bd56bda92bc6c46b4da7
SHA256

05b3ed23b766959d2b151deaf3768a5237c58f0fd5dd8872142da405e01b6c13
SHA512

fb65d09edf590988379ec975e9327507eb3d5ab6f22e7a52e135ac5c173f782b4eb14f0df325b7d266529e9d6f4cf412a6ae6effd4e588a7686194da87d049b9
SSDEEP

3072:Z1g2ZB+GEhO118/bPyKxM4QTJt2cWGsNPKisJoyjK7yGAe9Q0enyU8GZqaP+wPml:3hYzxMlNNsAisDRGAL0eyUBnPrPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05b3ed23b766959d2b151deaf3768a5237c58f0fd5dd8872142da405e01b6c13

Files

05b3ed23b766959d2b151deaf3768a5237c58f0fd5dd8872142da405e01b6c13
.exe windows:4 windows x86 arch:x86

3b42f9693bdd770281b738cfac146ecf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
lstrcpynW
GetModuleFileNameA
GetFileType
GetEnvironmentStringsA
GetProcAddress
BeginUpdateResourceW
GetCurrentThreadId
CreateMailslotW
AddAtomA
lstrlen
GetEnvironmentStringsW
GetExpandedNameA
WinExec
GetCurrentProcessId
GetThreadPriority
FindAtomA
OpenWaitableTimerW
GetModuleHandleA
GetLocaleInfoA
GetDateFormatA
GetShortPathNameW

user32

GetParent
CreateWindowExA
SetDlgItemTextW
DestroyIcon
GetDlgItemInt
IsWindow
IsMenu
PostMessageA
SetWindowLongW
GetWindowTextW
CallWindowProcW
GetCapture
GetSubMenu
InvalidateRect
DestroyWindow
GetDlgItem
WinHelpA
GetSystemMetrics
SetCursorPos
CreateCaret
CascadeWindows
EnumDesktopsA
GetDCEx
EndDialog
CreatePopupMenu
GetMessageA
GetCursorPos
CreateAcceleratorTableW
GetTopWindow
SetWindowRgn
SendMessageA

gdi32

ColorMatchToTarget
CreateCompatibleDC
Pie
CopyMetaFileW
ExtTextOutW
GetTextColor
SetColorAdjustment
CreatePatternBrush
SetMetaRgn
ExtFloodFill
GetEnhMetaFileDescriptionA
SetTextColor
ExtSelectClipRgn
AddFontResourceW
EndDoc
GetTextFaceW
GetCharacterPlacementA
GetMetaFileA

advapi32

RegOpenKeyW
RegFlushKey
RegOpenKeyA

shlwapi

GetMenuPosFromID
PathUnmakeSystemFolderA
UrlIsNoHistoryW
PathIsURLA
SHCreateShellPalette
PathRemoveArgsW
SHCopyKeyW
SHRegOpenUSKeyA
PathSearchAndQualifyW

Sections

.eX
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ah
Size: 2KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wc
Size: 512B - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cKgaFt
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.JbcCcw
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b42f9693bdd770281b738cfac146ecf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.eX Size: 12KB - Virtual size: 11KB

.ah Size: 2KB - Virtual size: 31KB

.wc Size: 512B - Virtual size: 402KB

.cKgaFt Size: 8KB - Virtual size: 8KB

.JbcCcw Size: 5KB - Virtual size: 11KB

.rsrc Size: 172KB - Virtual size: 171KB

.reloc Size: 1024B - Virtual size: 928B

.eX
Size: 12KB - Virtual size: 11KB

.ah
Size: 2KB - Virtual size: 31KB

.wc
Size: 512B - Virtual size: 402KB

.cKgaFt
Size: 8KB - Virtual size: 8KB

.JbcCcw
Size: 5KB - Virtual size: 11KB

.rsrc
Size: 172KB - Virtual size: 171KB

.reloc
Size: 1024B - Virtual size: 928B