0562f5a2712b6f65a7c00367c11240920f61ce3957822384b5a7588ff4a23fdc

General

Target

0562f5a2712b6f65a7c00367c11240920f61ce3957822384b5a7588ff4a23fdc
Size

11.4MB
MD5

82a6aecc66e0d701c71cdfe08661761a
SHA1

99670b33305a455ee5dbdd2656cbafa4a97ebb68
SHA256

0562f5a2712b6f65a7c00367c11240920f61ce3957822384b5a7588ff4a23fdc
SHA512

da52a529d04048ef4c5c9623ca4f181d33bc4190b1228f20fcebe10f7e13d209baa8e6c6089a321b9b8982108a5eb68e807224833f5c811089335dde3c299b72
SSDEEP

3072:gLvD/hmEkXB6gu/LlUoA4ChxvN9/XjQj9eIQ/wqnkG:sjlfA4Crv/PkDdqnkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0562f5a2712b6f65a7c00367c11240920f61ce3957822384b5a7588ff4a23fdc

Files

0562f5a2712b6f65a7c00367c11240920f61ce3957822384b5a7588ff4a23fdc
.exe windows:5 windows x86

52610fea7649d5772b468c5f6caa174c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

cfgmgr32

CM_Add_Empty_Log_Conf
CMP_Report_LogOn
CMP_Init_Detection

clusapi

CloseCluster
CloseClusterGroup
CloseClusterNode
ClusterEnum
ClusterControl

user32

LoadMenuW
DrawStateA
FlashWindow
GetPropA
PostMessageW
LoadBitmapA
IsCharLowerW
CreateDesktopW
DispatchMessageW
DialogBoxParamA
wsprintfA
IsDialogMessageW
LoadIconA
PeekMessageA

dbnmpntw

ConnectionVer
ConnectionClose
ConnectionWrite
ConnectionError
ConnectionRead

kernel32

MoveFileW
LeaveCriticalSection
GetDateFormatA
ReadConsoleA
GetProcAddress
CreateSemaphoreA
WaitNamedPipeW
LoadLibraryA
GetSystemDirectoryA
WaitForSingleObjectEx
DeleteFileW
GetCurrentThreadId
GetStartupInfoW
CreateMailslotW
SetErrorMode
lstrcmpiW
MoveFileExW
CloseHandle
GetTempPathW
GetShortPathNameA
GetExpandedNameA
LoadLibraryExW

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11.2MB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52610fea7649d5772b468c5f6caa174c

Headers

DLL Characteristics

File Characteristics

Imports

cfgmgr32

clusapi

user32

dbnmpntw

kernel32

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 75KB - Virtual size: 75KB

.rsrc Size: 11.2MB - Virtual size: 2KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 75KB - Virtual size: 75KB

.rsrc
Size: 11.2MB - Virtual size: 2KB