79bddd30837b4e420fd793fc08e1e7eab686ce80f28620cdc7f7bf55c8b48d67

General

Target

79bddd30837b4e420fd793fc08e1e7eab686ce80f28620cdc7f7bf55c8b48d67
Size

8.3MB
MD5

d80f304f74fff5f93a00cfbf58c4262a
SHA1

d68caecadb364dbd3754c6a9f215e5b882e0884d
SHA256

79bddd30837b4e420fd793fc08e1e7eab686ce80f28620cdc7f7bf55c8b48d67
SHA512

ab8b7723ac0c0d165c68d4085d25a11e29e2238528802552a6f14aaeec18b2a6e27b0e7b5d35101661d224f70b1e86c551657a1ebebcb11323ecda15bbdda94a
SSDEEP

98304:2rMZZHm1/D2cYSSyK3XchDdf2J1JhQLY2M/6vj5VLoGm4vLhPlrJEN:3Z1i2cYSSyfveQLY2Q6vj7Lt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79bddd30837b4e420fd793fc08e1e7eab686ce80f28620cdc7f7bf55c8b48d67

Files

79bddd30837b4e420fd793fc08e1e7eab686ce80f28620cdc7f7bf55c8b48d67
.exe windows:5 windows x86 arch:x86

c456cc7ccfc5f6ea9ab95242145f6499

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

hid

HidD_GetAttributes
HidD_GetHidGuid

kernel32

LoadResource
GetModuleHandleW
FindResourceW
ExitProcess
ReadFile
HeapFree
WriteFile
CreateFileW
GetLastError
CloseHandle
HeapAlloc
GetFileSize
lstrcpyW
GetTickCount
SizeofResource
HeapCreate
GetCommandLineW
lstrlenW
CreateMutexW
WaitForSingleObject
ReleaseMutex
Sleep
LockResource
CreateThread

user32

DialogBoxParamW
GetDlgItem
wsprintfW
LoadImageW
SetDlgItemTextW
LoadStringW
SetWindowTextW
GetSystemMetrics
EndDialog
SendMessageW
MessageBoxW
SendDlgItemMessageW

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c456cc7ccfc5f6ea9ab95242145f6499

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

setupapi

hid

kernel32

user32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 8.3MB - Virtual size: 8.3MB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 8.3MB - Virtual size: 8.3MB

.reloc
Size: 512B - Virtual size: 492B