9c2afdbc015207d25281dfbb7a981c2c77e1c1078dd11bfca70179e219c3563b

General

Target

9c2afdbc015207d25281dfbb7a981c2c77e1c1078dd11bfca70179e219c3563b
Size

131KB
MD5

696c9763260a70bae7f084a39b892af0
SHA1

74f99b10a1820c70b5356620d16a4fc9ee4e7169
SHA256

9c2afdbc015207d25281dfbb7a981c2c77e1c1078dd11bfca70179e219c3563b
SHA512

bfd2e9195039114a05845a072f3d33ec9ddfe905ad65fa7c3d50eef1398c1e1fe6bae4d6fd3459a6234b988d392e97fbe46cbe9f6c08e06c27b516cdbff16a37
SSDEEP

1536:i5tHlfYC3/gvDeyPf6IrzBhhMtw7abABBz7oBM+J42D612vhgngY2EXCGGFlrR07:ibZ4eyT9IeObALzpV2G+GG+gJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9c2afdbc015207d25281dfbb7a981c2c77e1c1078dd11bfca70179e219c3563b

Files

9c2afdbc015207d25281dfbb7a981c2c77e1c1078dd11bfca70179e219c3563b
.exe windows:5 windows x86 arch:x86

eb4b7738519b32d3ac7cfc309fa59454

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileAttributesW
HeapFree
GetStringTypeA
LoadLibraryA
GetPrivateProfileSectionA
GetFileAttributesW
GetStdHandle
FindVolumeClose
GetCurrentProcess
VirtualProtectEx
GlobalLock
GetPrivateProfileIntA
CreateEventA
GetDriveTypeA
CreateDirectoryW
GetCurrentThread
CloseHandle
DeviceIoControl
RemoveDirectoryA
GlobalFlags
GetVersionExA

shell32

DragFinish
StrChrA
DragQueryFileA
DllUnregisterServer
ShellMessageBoxA
SHFree
ExtractIconA
DuplicateIcon
ShellAboutA
DragAcceptFiles
DllUnregisterServer
SHGetMalloc
SHGetSettings

ntmarta

AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb4b7738519b32d3ac7cfc309fa59454

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 121KB - Virtual size: 121KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 121KB - Virtual size: 121KB

.import
Size: 512B - Virtual size: 372B