a59f9536592d37c0b03b0e6c56b034d950c666b74f673fbe3f1c54d52695af0d

Sharing

Copy URL Twitter E-mail

General

Target

a59f9536592d37c0b03b0e6c56b034d950c666b74f673fbe3f1c54d52695af0d
Size

121KB
MD5

316e953eca1db828b2a7f48db16299da
SHA1

44ae651ef074bd5fee2b486d9ed49b6dc24d47c7
SHA256

a59f9536592d37c0b03b0e6c56b034d950c666b74f673fbe3f1c54d52695af0d
SHA512

b0fcf5944faf46d408d5be49525c1abcb5ae435310b565f5c5f6d47342a6870ab4aa432d8f3c1b6c79b871faaf2a8f2962c670d8563c5bea34d3157a9f368278
SSDEEP

1536:iUK3ATn6Q1w6ZnBbWxu5hb86HTU879i0PORJrqpzuQfuH+:SwTJPl9Wxuw6HTqR4pu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59f9536592d37c0b03b0e6c56b034d950c666b74f673fbe3f1c54d52695af0d

Files

a59f9536592d37c0b03b0e6c56b034d950c666b74f673fbe3f1c54d52695af0d
.exe windows:4 windows x86 arch:x86

cf4c8c331e1c03c058eca710d9dcee77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
VerQueryValueA
GetFileVersionInfoA

user32

IntersectRect
MessageBoxA
DestroyCursor
SetCapture
SetParent
DefFrameProcA
LoadKeyboardLayoutA
GetClassLongA
GetMenuItemCount
MessageBeep
GetSystemMenu
RemovePropA
RegisterWindowMessageA
DefWindowProcA
GetKeyboardState
SetFocus
ReleaseCapture
IsChild
GetTopWindow
CallNextHookEx
ScreenToClient
SetScrollInfo
DrawIcon
OffsetRect
SetMenuItemInfoA
LoadStringA
PeekMessageW
IsWindowUnicode
DispatchMessageA

gdi32

CreatePenIndirect

kernel32

SetFilePointer
GetLastError
GetModuleHandleA
CloseHandle
VirtualAllocEx
GetTickCount
GetProcAddress
DeleteFileA
GetCurrentThreadId
ExitThread
LocalAlloc

advapi32

RegDeleteKeyA
RegEnumValueA

shlwapi

PathIsDirectoryA
PathFileExistsA
SHQueryInfoKeyA
PathIsContentTypeA

shell32

SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
Shell_NotifyIconA
SHGetFileInfoA

comdlg32

GetFileTitleA
FindTextA

ole32

CoTaskMemFree
CoReleaseMarshalData
StringFromIID
CoGetContextToken

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_Destroy

oleaut32

SysAllocStringLen
VariantCopyInd
SysReAllocStringLen
RegisterTypeLib
SafeArrayPtrOfIndex
SysStringLen
GetErrorInfo
SysFreeString
SafeArrayGetUBound
SafeArrayCreate

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf4c8c331e1c03c058eca710d9dcee77

Headers

File Characteristics

Imports

version

user32

gdi32

kernel32

advapi32

shlwapi

shell32

comdlg32

ole32

comctl32

oleaut32

Sections

.text Size: 30KB - Virtual size: 29KB

.idata Size: 512B - Virtual size: 430B

DATA Size: 85KB - Virtual size: 85KB

.tls Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.idata
Size: 512B - Virtual size: 430B

DATA
Size: 85KB - Virtual size: 85KB

.tls
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB