0817dd672d4a7f5e6fd0fef12e69ded36d4e886f74355bd972dd651de363485f

Sharing

Copy URL Twitter E-mail

General

Target

0817dd672d4a7f5e6fd0fef12e69ded36d4e886f74355bd972dd651de363485f
Size

2.7MB
MD5

e198c9ec83905fc5b95587fac6a38321
SHA1

958a87deb37172c34de3addff039e53f36d1f95e
SHA256

0817dd672d4a7f5e6fd0fef12e69ded36d4e886f74355bd972dd651de363485f
SHA512

c2298183db4d8d6edd6454ded419462ba664b6acedd5fc308b59c02d8ce30d6d879b426971897df8d706523179606f39ee638c1b15db672483948be3244592e2
SSDEEP

49152:3ty/2N1RPEJ2jeOfkKj7+28Yn2weVC6Hz+uUWDcL11ip1O1TEuYbWepj7Ckds:ZRPhgA+6WZz0WDO1IpQEz1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0817dd672d4a7f5e6fd0fef12e69ded36d4e886f74355bd972dd651de363485f

Files

0817dd672d4a7f5e6fd0fef12e69ded36d4e886f74355bd972dd651de363485f
.dll windows:5 windows x86

2b8a39650ee8c66ac061c48f640bc74d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wintrust

CryptCATHandleFromStore

user32

ShowWindow
DefWindowProcA

kernel32

GetSystemTimeAsFileTime
DeleteCriticalSection
EnterCriticalSection
SetEvent
LeaveCriticalSection
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExW
GetBinaryTypeA
GetModuleFileNameA

setupapi

SetupDiDestroyDeviceInfoList

shell32

SHFileOperationA

gdi32

SetEnhMetaFileBits
GetCharWidthFloatA

oleaut32

SafeArrayCreate

ws2_32

select
WSAGetLastError

lz32

GetExpandedNameW

advapi32

LookupPrivilegeNameW
CryptSetHashParam

Exports

Exports

TponfKheem

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4E7
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CRT
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt0
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2b8a39650ee8c66ac061c48f640bc74d

Headers

File Characteristics

Imports

wintrust

user32

kernel32

setupapi

shell32

gdi32

oleaut32

ws2_32

lz32

advapi32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 292KB - Virtual size: 293KB

4E7 Size: 1.2MB - Virtual size: 1.2MB

CRT Size: 28KB - Virtual size: 26KB

.crt0 Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 4KB - Virtual size: 1008B

.reloc Size: 68KB - Virtual size: 66KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 292KB - Virtual size: 293KB

4E7
Size: 1.2MB - Virtual size: 1.2MB

CRT
Size: 28KB - Virtual size: 26KB

.crt0
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 4KB - Virtual size: 1008B

.reloc
Size: 68KB - Virtual size: 66KB