1ed7f06e7bbe466ee8827661103808235e8d86d115b39f9b802275de746638a9

General

Target

1ed7f06e7bbe466ee8827661103808235e8d86d115b39f9b802275de746638a9
Size

274KB
MD5

be32492e6aecda45740e1e93489a30ad
SHA1

524fab6a039db492c52ef9675900bc9369067cf2
SHA256

1ed7f06e7bbe466ee8827661103808235e8d86d115b39f9b802275de746638a9
SHA512

70e7444716b8baeea5bb8e4768d9e2371be07d9929f1490d0d8bb2ea5045a1db5d49f77887aec1ef21f295e47a8a15246b853a50a120d543915e31b182dbf108
SSDEEP

6144:tmZS7byibR/cFje+5EQ1NgnrGO7+HVUuYW+:zPbk5FyZru5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed7f06e7bbe466ee8827661103808235e8d86d115b39f9b802275de746638a9

Files

1ed7f06e7bbe466ee8827661103808235e8d86d115b39f9b802275de746638a9
.exe windows:4 windows x86 arch:x86

dfaa55409e0438ffbf65719cc113953f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
WritePrivateProfileStringW
FindResourceW
GlobalSize
CloseHandle
GlobalGetAtomNameA
LoadResource
WaitForSingleObject
FindCloseChangeNotification
MulDiv
GetProcAddress
GetTickCount
GlobalLock
FindNextChangeNotification
GetVersionExW
MultiByteToWideChar
GetPrivateProfileStringW
GetVersionExA
lstrlenW
FreeLibrary
DeleteCriticalSection
FindClose
EnumResourceTypesW
LoadLibraryA
LockResource
GetModuleHandleW
Sleep
GetCurrentDirectoryW
IsBadCodePtr
GetModuleFileNameW
InitializeCriticalSection
GlobalUnlock
LoadLibraryW
GlobalAlloc
FindFirstChangeNotificationW
GetPrivateProfileIntW
GetLocaleInfoW

wininet

InternetReadFile
InternetOpenA
HttpSendRequestA
InternetConnectA
InternetErrorDlg
InternetTimeToSystemTime
HttpQueryInfoA
HttpOpenRequestA
InternetCloseHandle
InternetCrackUrlA
InternetTimeFromSystemTime

shell32

SHGetImageList
ShellExecuteExA
SHGetFolderPathW
SHGetFileInfoA
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHFileOperationW
SHGetPathFromIDListA
SHBrowseForFolderA
Shell_NotifyIconA

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dfaa55409e0438ffbf65719cc113953f

Headers

File Characteristics

Imports

kernel32

wininet

shell32

Sections

.text Size: 115KB - Virtual size: 115KB

.rdata Size: 2KB - Virtual size: 137KB

.data Size: 155KB - Virtual size: 155KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 115KB - Virtual size: 115KB

.rdata
Size: 2KB - Virtual size: 137KB

.data
Size: 155KB - Virtual size: 155KB

.rsrc
Size: 512B - Virtual size: 4KB