a342ad9e72402955571b9d2b54b6b2d3bda0883269a3c11a3775293b424b4083N

General

Target

a342ad9e72402955571b9d2b54b6b2d3bda0883269a3c11a3775293b424b4083N
Size

850KB
MD5

256163159a936af461e41a0b8c493c70
SHA1

c2bfdbf24fa8120dbfecd52da18791ae73b5a7fb
SHA256

a342ad9e72402955571b9d2b54b6b2d3bda0883269a3c11a3775293b424b4083
SHA512

a728f2e3358915fae1850c9d932acf25ba5abc79a403067ccb438629b824d9693c934b417cca5b5e028140b7dfddbc4b56ea407f060147bd3831589fabe97ded
SSDEEP

12288:nP1E6aimSGbGHowE8z5dTVNyI8FC6ZA1Cegbhe7lYEtG99XbxvATvp5iGPEC0inw:NUiYC5tyI1R6KaLdEp86ECJn20A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a342ad9e72402955571b9d2b54b6b2d3bda0883269a3c11a3775293b424b4083N

Files

a342ad9e72402955571b9d2b54b6b2d3bda0883269a3c11a3775293b424b4083N
.exe windows:4 windows x86 arch:x86

29617146433ec464bf4d3c61c181fbae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
CloseHandle
WriteFile
GetTempPathA
GetSystemTime
lstrlenA
GetTempFileNameA
GetModuleFileNameA
CreateProcessA
GetStartupInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
CreateFileA
GetFileSize
GetLastError
GetModuleHandleA
WaitForSingleObject
DeleteFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers

user32

CreateDialogParamA
GetDlgItem
SendMessageA
UpdateWindow
DestroyWindow

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29617146433ec464bf4d3c61c181fbae

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

Sections

.text Size: 24KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 12KB - Virtual size: 8KB