da9480cac1291c71da9c4ba6f385b9046e3c2efc10acb5ade6efa4d030e619f0

Sharing

Copy URL Twitter E-mail

General

Target

da9480cac1291c71da9c4ba6f385b9046e3c2efc10acb5ade6efa4d030e619f0
Size

32KB
MD5

dc8a0a5e24359f20515d1284ff6a098a
SHA1

429c0e6017bf5440aeeaa3f879f373769b92c460
SHA256

da9480cac1291c71da9c4ba6f385b9046e3c2efc10acb5ade6efa4d030e619f0
SHA512

46cf32fa819cb08a39c0ce8b31af1d956fd3207cd407ebae606f66923632cebc2f0e5815fe21a2c4651189834fe4a023669d5526fbce7d65060e2b3af87cf635
SSDEEP

192:I+H9RUKlqceHZpYd0sruSm0ipez8OzgrWB6ei6B7uB8Pix6C:Is9mkegGsruSm0iIzFzg6kS7uBMix6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da9480cac1291c71da9c4ba6f385b9046e3c2efc10acb5ade6efa4d030e619f0

Files

da9480cac1291c71da9c4ba6f385b9046e3c2efc10acb5ade6efa4d030e619f0
.exe windows:4 windows x86 arch:x86

034376562b8707546dfb2863f03d147a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControls

kernel32

CopyFileW
DosDateTimeToFileTime
FileTimeToSystemTime
GetCommandLineW
GetCurrentDirectoryW
GetDateFormatA
GetFullPathNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetStdHandle
GetTickCount
GetTimeFormatA
HeapAlloc
HeapReAlloc
IsBadStringPtrW
WriteFile

ntdll

_vsnprintf

setupapi

SetupIterateCabinetW

shell32

SHCreateDirectoryExW

shlwapi

PathAddBackslashW
PathCombineW
PathFileExistsW
PathFindFileNameW
PathIsDirectoryW

ucrtbase

__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vsprintf
__stdio_common_vswprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_strdup
_wcsdup
exit
free
fwrite
getenv
iswspace
malloc
memcmp
memmove
realloc
strchr
strcmp
strcspn
strlen
towupper

user32

MessageBoxW
wsprintfA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

034376562b8707546dfb2863f03d147a

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

ntdll

setupapi

shell32

shlwapi

ucrtbase

user32

Sections

.text Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 56B

.rdata Size: 4KB - Virtual size: 664B

.bss Size: - Virtual size: 192B

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 632B

.reloc Size: 4KB - Virtual size: 440B

.text
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 56B

.rdata
Size: 4KB - Virtual size: 664B

.bss
Size: - Virtual size: 192B

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 632B

.reloc
Size: 4KB - Virtual size: 440B