acde06c29742fa4056ec6e71a7a0a43185f60b36f8395d17086eeb1d6b6515bb

Sharing

Copy URL

Twitter E-mail

General

Target

acde06c29742fa4056ec6e71a7a0a43185f60b36f8395d17086eeb1d6b6515bb
Size

179KB
MD5

152363afa018ef3174e50eba9c3bc688
SHA1

943cf9c034d7f680414a720b56e0f5e27a11853d
SHA256

acde06c29742fa4056ec6e71a7a0a43185f60b36f8395d17086eeb1d6b6515bb
SHA512

2141069dbdba587f4d5dc5d99602846b9d84e347f062ae7e0f65c572ac07a7b264e45ad7ecc1b617aedde2e527b5c4b203269d3aeefaedfbabf98091b06518fc
SSDEEP

3072:TDl3IgC79sTSA2onU7BhPD0LRxi0CGmOWps6+Hjval4okuQkt/ZC/5s/L2M:TyB79s2A2y6BFs+ZGK7P4oku5u5cL2M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acde06c29742fa4056ec6e71a7a0a43185f60b36f8395d17086eeb1d6b6515bb

Files

acde06c29742fa4056ec6e71a7a0a43185f60b36f8395d17086eeb1d6b6515bb
.exe windows:4 windows x86 arch:x86

60f267be107371e6a3b435570394ca13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

ole32

CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

SetTapeParameters
Sleep
ClearCommError
FindClose
GetLocalTime
InterlockedExchange
EnumResourceNamesA
GetVersion
ExitProcess
GetWindowsDirectoryA
GetCurrentProcessId
FindFirstFileA

gdi32

GetTextExtentPoint32A
DeleteDC
SaveDC
SetBkMode
Rectangle
GetObjectA
GetStockObject
CreateFontIndirectA
GetDeviceCaps
CreateRectRgn
CreateCompatibleDC
SelectObject
BitBlt
CreateSolidBrush
TextOutA
EnumFontFamiliesExA
DeleteMetaFile
RestoreDC
DeleteObject
SetTextColor
CreateCompatibleBitmap

user32

SetWindowPos
ReleaseCapture
SetWindowLongA
ReleaseDC
GetDlgItem
FillRect
GetDC
GetWindowLongA
MoveWindow
GetSysColor
LoadCursorA
SetCursor
GetWindowInfo
IsWindow
SetCapture

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

winmm

mciSendCommandA
sndPlaySoundA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60f267be107371e6a3b435570394ca13

Headers

File Characteristics

Imports

ole32

oleacc

advapi32

kernel32

gdi32

user32

shell32

winmm

version

Sections

.text Size: 153KB - Virtual size: 153KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 22KB - Virtual size: 21KB

.lib Size: 512B - Virtual size: 76KB

.text
Size: 153KB - Virtual size: 153KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 22KB - Virtual size: 21KB

.lib
Size: 512B - Virtual size: 76KB