appidtel[.]exe

General

Target

appidtel.exe
Size

21KB
MD5

cb30ba75b5bd63d93f1bdf90d23b091a
SHA1

1eb9f4c54544c9ff98e750ba12558e8d8db9d7e6
SHA256

95feba5a2c03995f20189e0406f8759449d5741f79088c6509bbffa01d58230c
SHA512

71e440ff92bc607a01f48d33677a26c9528baae8f79c4de85851d2b3ffbfb4b7282f758bd4539d166c5576f321d94b4260118088fb378a8194968a212db13df3
SSDEEP

384:N+svjsKmxpVcNsPVRxratsrxAge8G+CBUpKymRDyWsdsWOkr:UsvjlUp3RusnG+IymRE4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
appidtel.exe

Files

appidtel.exe
.exe windows x86

45b4e0f623405c276e4da9f4816c57f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
__p__fmode
__setusermatherr
_initterm
_lock
_exit
__dllonexit
_onexit
_except_handler4_common
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_controlfp
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
malloc
_wtoi64
_purecall
??3@YAXPAX@Z
_wcsicmp
_unlock
__CxxFrameHandler3

ntdll

NtQuerySystemTime

advapi32

RegCloseKey
OpenServiceW
ChangeServiceConfigW
RegCreateKeyW
StartServiceW
RegSetValueExW
ControlService
OpenSCManagerW
CloseServiceHandle

kernel32

Sleep
SetUnhandledExceptionFilter
GetLastError
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45b4e0f623405c276e4da9f4816c57f0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

advapi32

kernel32

Sections

.text Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB