d75e029b4f5e7310fe2698e25f702df0N

General

Target

d75e029b4f5e7310fe2698e25f702df0N
Size

49KB
MD5

d75e029b4f5e7310fe2698e25f702df0
SHA1

e58d30f91aeba772d35229fd6316d58c0dd95d65
SHA256

97ed1344bef4b7b1db3fe4e79c08c43d84600cfeefc8cf19c9349c57689e9725
SHA512

8a0304bf2102cb196934e3ab84195d49d84ae6040afa5e93948a5bd0906b50eb04901eeb6a6153abf1c609dbe6878001c4a11510f8f25c2c7100addfe4eaaf72
SSDEEP

768:onh74LQhBue7+WeXAZw5pUCmlfIMoGgGsN40S36fHAMhf4J:ohyU3+BAupUCLkgXbhgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d75e029b4f5e7310fe2698e25f702df0N

Files

d75e029b4f5e7310fe2698e25f702df0N
.exe windows:1 windows x86 arch:x86

d3ef143d9189b6c5643321ebadccb4f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventW
CreateFileW
CreateMutexA
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadFile
Sleep
UnhandledExceptionFilter
lstrlenW

user32

BeginPaint
CharNextW
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DispatchMessageW
EndPaint
GetClientRect
GetDC
GetDesktopWindow
GetFocus
GetParent
GetSysColor
GetSystemMetrics
GetWindowLongW
GetWindowRect
IsDlgButtonChecked
IsWindow
KillTimer
LoadCursorW
LoadIconW
LoadStringW
MessageBoxW
PeekMessageW
PostMessageW
PostQuitMessage
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus

msacm32

acmGetVersion
acmMetrics

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3ef143d9189b6c5643321ebadccb4f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msacm32

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 32KB

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 32KB

.rsrc
Size: 9KB - Virtual size: 9KB