d4d270759b8e0bd23edcd7f7bb890610N

Sharing

Copy URL Twitter E-mail

General

Target

d4d270759b8e0bd23edcd7f7bb890610N
Size

86KB
MD5

d4d270759b8e0bd23edcd7f7bb890610
SHA1

6645c241dec72612b8fdd8a15166865491bad1c7
SHA256

59bcbc28a1f7ef8c25d4c854f3ac1063722d11bfe4f6e1ddd271fe4d335358bb
SHA512

dd11016da9cbc125d8c310587190ae273d597b33c5a388708c842987f5d853fbcde00dd7df013ef0493666b183d6fc2ff245e2e669707c1ce109d9b77f542dbb
SSDEEP

1536:rIgzQzoCulytRNOoALhaAOzr2VyucHVdf+zylLcUWhMkvw7Seu6/vSDTyBKg:UdSotRNDYFcrenc/hc5OkvBeu6nWTyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4d270759b8e0bd23edcd7f7bb890610N

Files

d4d270759b8e0bd23edcd7f7bb890610N
.exe windows:5 windows x86 arch:x86

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

O:\vvsK\yqxcwyejbUzq4\usCFnoE\wZnvdye.lPb

Imports

shlwapi

ChrCmpIW
ord158
PathMakePrettyW
StrCpyNW
StrCatW
StrStrA
PathCompactPathExA
StrCmpNIW
PathFindNextComponentW

kernel32

CancelWaitableTimer
OpenSemaphoreA
lstrcmpiA
SetMailslotInfo
CreateHardLinkA
GetSystemTimeAdjustment
GetModuleHandleA
SetupComm
GetCommModemStatus
SetInformationJobObject
GlobalCompact
SetMessageWaitingIndicator
IsBadWritePtr
SetTapePosition
LoadLibraryA
GetModuleHandleExA
LoadLibraryExW

user32

CopyImage
PostMessageW
InvalidateRgn
GetClipboardOwner
CreateCursor
DrawIcon
GetClientRect
GetWindowTextLengthA
SetWinEventHook
SetRect
EnableMenuItem
SystemParametersInfoA
MapWindowPoints
GetDialogBaseUnits

gdi32

CreateFontIndirectW
GetDIBits
GetRgnBox
CreatePatternBrush
GetTextCharset
CreateEnhMetaFileW
GetEnhMetaFileBits
SetBkColor
SetArcDirection
PlayEnhMetaFileRecord
SetViewportExtEx

msvcrt

memset

Exports

Exports

?_ChildWindowFromPoint@@YGKPAD0@Z
?_ChildWindowFromPointEx@@YGKPAD0PAG@Z
?_WindowFromPhysicalPoint@@YGPAXPAKPAEPAI@Z

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.m_data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CData
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NData
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84164121d4e4c24e5df0fa7adaacb3c5

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

gdi32

msvcrt

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.icode Size: 1024B - Virtual size: 643B

.m_data Size: 2KB - Virtual size: 2KB

CData Size: 512B - Virtual size: 176B

NData Size: 1024B - Virtual size: 532B

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 1024B - Virtual size: 766B

.text
Size: 10KB - Virtual size: 10KB

.icode
Size: 1024B - Virtual size: 643B

.m_data
Size: 2KB - Virtual size: 2KB

CData
Size: 512B - Virtual size: 176B

NData
Size: 1024B - Virtual size: 532B

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 1024B - Virtual size: 766B