a42bffa7b16e85fb92f190eea1b942f11f9a2406db21c65cf92c1c6869e248ec

General

Target

a42bffa7b16e85fb92f190eea1b942f11f9a2406db21c65cf92c1c6869e248ec
Size

197KB
MD5

4ed628aa26fa79959ac47e1aaab2fe23
SHA1

f54659f75f9f282a3d2498bf37194956e2fba0f8
SHA256

a42bffa7b16e85fb92f190eea1b942f11f9a2406db21c65cf92c1c6869e248ec
SHA512

e82dae5490a349f55b6bb0e810255144ce8213c5cc08fa7acaf3872096ed36343471a69cf6bed98f9b18f6d64f5ebffe518b0804dd213ef7c4e1f17f59bfdf0a
SSDEEP

6144:qzGTvzto1TtnLdSEu28LUHNHzkWwaJthI6v3jdwIa:C8vzwthSEuCFzkW5thOIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/295874510bc06125746ae8ffcea35727212e9091d4eb5e2bb99bc69567879353

Files

a42bffa7b16e85fb92f190eea1b942f11f9a2406db21c65cf92c1c6869e248ec
.zip

Password: infected
295874510bc06125746ae8ffcea35727212e9091d4eb5e2bb99bc69567879353
.exe windows:4 windows x86 arch:x86

b78806507e9e91c757933cbef14aa52b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
LoadAcceleratorsA
FindWindowA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
SetTimer
DefWindowProcA
DialogBoxParamA
BeginPaint
MoveWindow
EndPaint
PostQuitMessage
SetFocus
PostMessageA
DestroyWindow
EndDialog
LoadBitmapA
CreateWindowExA
UpdateWindow
ShowWindow
MessageBoxW
RemovePropW
GetClassNameW
RemoveMenu
ScreenToClient

kernel32

InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapAlloc
GetStartupInfoA
GetTempPathA
SleepEx
GetModuleHandleA
GetTickCount
GetVersionExA
GetProcAddress
GetEnvironmentStringsW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile

comctl32

InitCommonControlsEx

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

b78806507e9e91c757933cbef14aa52b

Headers

File Characteristics

Imports

user32

kernel32

comctl32

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 106KB - Virtual size: 106KB

.data Size: 96KB - Virtual size: 97KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 106KB - Virtual size: 106KB

.data
Size: 96KB - Virtual size: 97KB

.rsrc
Size: 108KB - Virtual size: 108KB