UserAccountControlSettings[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

UserAccountControlSettings.exe
Size

213KB
MD5

ba2d71dff157c2dff18a7232bc12019d
SHA1

b7cbcbf292dcfd0dc75c63bf279cd2cc3aada990
SHA256

5e760a16d9472aee78ac0b5323b79b53a5279ab4dd411f940cee6e928c280758
SHA512

511a5c755fb9641d727e4be3d7cd6310fabc7a306ed3ea55cb62d12e55c86043c5a9aabbee5750762856ccb5010bcfb73dac0e9be9f3c72211eed44c1b2ba1b9
SSDEEP

3072:a5g3p0rcKl2MXtPofEeRNywSuMpCkQ/D+Vm/JYpW+j:a5Omrp2MXt6Vkw7YrQiVZA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UserAccountControlSettings.exe

Files

UserAccountControlSettings.exe
.exe windows x86

739e4bbdbf7fa6522930fcc4efc9a56b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetTokenInformation
DuplicateToken
CheckTokenMembership
CreateWellKnownSid
OpenProcessToken

kernel32

GetCommandLineW
FreeLibrary
GetCurrentProcess
LoadLibraryW
CompareStringOrdinal
GetLastError
CloseHandle
LocalFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
UnhandledExceptionFilter
TerminateProcess
DelayLoadFailureHook
ResolveDelayLoadedAPI
GetTickCount

user32

GetCursorPos
SetWindowPos
DestroyWindow
MonitorFromPoint
SetForegroundWindow
LoadStringW
GetMonitorInfoW

msvcrt

__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
_vsnwprintf
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_wcmdln
_initterm
__setusermatherr
exit
_cexit
__set_app_type
_exit
__p__fmode
memset

shell32

CommandLineToArgvW

ole32

CoUninitialize
StringFromGUID2
CoGetObject
CoInitializeEx
CoAllowSetForegroundWindow

shlwapi

ord240
ord278

ntdll

NtQueryInformationToken

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

739e4bbdbf7fa6522930fcc4efc9a56b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

shell32

ole32

shlwapi

ntdll

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 896B

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 203KB - Virtual size: 203KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 896B

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 203KB - Virtual size: 203KB

.reloc
Size: 2KB - Virtual size: 1KB