5b33f1d735f26a53b0c46bd6cc1e9682696caf38242701f3bbbf8c55b8124cc8

General

Target

5b33f1d735f26a53b0c46bd6cc1e9682696caf38242701f3bbbf8c55b8124cc8
Size

220KB
MD5

9b9e5dbeea0fa50b120825650eb67994
SHA1

79ac9f07b78d80911c1dd96a2316addd1d816935
SHA256

5b33f1d735f26a53b0c46bd6cc1e9682696caf38242701f3bbbf8c55b8124cc8
SHA512

377e182c3ff77e7f552e1f66810ceedffc5b07cd227859f1ef9fe0c8dc201e5c0434daa4ae40915f4b92f43009fbbd470bceff967ac3ddd4df2af679de2ab5ad
SSDEEP

6144:uR/bxfENuX1Ed5hZ9UxhX4O498sfti2QBm1vFkeI:uRzxauedXrQ4984HQB6F9I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b33f1d735f26a53b0c46bd6cc1e9682696caf38242701f3bbbf8c55b8124cc8

Files

5b33f1d735f26a53b0c46bd6cc1e9682696caf38242701f3bbbf8c55b8124cc8
.exe windows x86

ae39c93899657b5d49b4652a7a738fd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
SystemTimeToFileTime
HeapFree
QueryDosDeviceA
SetUnhandledExceptionFilter
lstrlenA
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
GetLocalTime
GetProcessHeap
GetLocaleInfoW
WideCharToMultiByte
LockResource
GetTickCount
GetCurrentProcess
LoadLibraryW
QueryPerformanceCounter
GetVolumeInformationA
SetLastError
GetEnvironmentStringsW
GetOEMCP
CreateFileA
MultiByteToWideChar
lstrcmpA
HeapAlloc
FindResourceA

rasctrs

OpenRasPerformanceData
CloseRasPerformanceData

rasapi32

RasValidateEntryNameA
RasValidateEntryNameW
DwCloneEntry
RasSetSubEntryPropertiesW

rasman

RasActivateRouteEx
RasAddConnectionPort
RasAllocateRoute
IsRasmanProcess

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW

raschap

RasEapGetInfo
RasCpEnumProtocolIds
RasCpGetInfo

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ropf
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae39c93899657b5d49b4652a7a738fd1

Headers

File Characteristics

Imports

kernel32

rasctrs

rasapi32

rasman

advapi32

raschap

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 55KB - Virtual size: 54KB

.data Size: 14KB - Virtual size: 162KB

.rcrc Size: 2KB - Virtual size: 2KB

.nodata Size: 4KB - Virtual size: 4KB

.ropf Size: 5KB - Virtual size: 5KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 55KB - Virtual size: 54KB

.data
Size: 14KB - Virtual size: 162KB

.rcrc
Size: 2KB - Virtual size: 2KB

.nodata
Size: 4KB - Virtual size: 4KB

.ropf
Size: 5KB - Virtual size: 5KB