3a69d8248d2bc9e4cc54df70b819b99a61c21cba4e64adcb986ad3fb33cedf5f

Sharing

Copy URL Twitter E-mail

General

Target

3a69d8248d2bc9e4cc54df70b819b99a61c21cba4e64adcb986ad3fb33cedf5f
Size

44KB
MD5

b65d89ed3025dc20a25093cfc95294e9
SHA1

e77564e535acb7ebedf08b31a0b088498445936b
SHA256

3a69d8248d2bc9e4cc54df70b819b99a61c21cba4e64adcb986ad3fb33cedf5f
SHA512

17a53750e00d77a50076778a8dd2db347aae1e4873402b6e62e42a9e4c23bebb4a752f5f2d5af91d68d193e097151210d01d5910be88d11187c42de49ca118dd
SSDEEP

768:ld1LHt8gLE1k9AvCVkuvlxnfzra0s2BZdu6Ch9dzfpRvevLTtG:lt8r1WAvN8lVJB/ChHVxWZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a69d8248d2bc9e4cc54df70b819b99a61c21cba4e64adcb986ad3fb33cedf5f

Files

3a69d8248d2bc9e4cc54df70b819b99a61c21cba4e64adcb986ad3fb33cedf5f
.exe windows:5 windows x86 arch:x86

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
OpenProcessToken
DeregisterEventSource
ReportEventW
RegCloseKey
RegisterEventSourceW
GetUserNameW

crypt32

CryptProtectData

winspool.drv

SpoolerInit

user32

wsprintfW
CharNextW
LoadStringW
MessageBoxW
LoadRemoteFonts

shell32

ShellExecuteExW

ntdll

NtClose
_chkstk
_wcsicmp
NtOpenKey
DbgPrint
wcscpy
RtlInitUnicodeString
memmove

imm32

ImmDisableIME

userenv

ord175

msvcrt

__set_app_type
_controlfp
_except_handler3
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
exit
_XcptFilter
_exit
_acmdln
__getmainargs
__p__commode

kernel32

GetCurrentProcessId
SetEvent
GetModuleHandleA
CompareFileTime
GetThreadLocale
GetCurrentThread
SetThreadPriority
CreateThread
TerminateThread
LoadLibraryW
GetProcAddress
FreeLibrary
Sleep
OpenEventW
GetEnvironmentVariableW
SetCurrentDirectoryW
GetPrivateProfileStringW
GetFileAttributesExW
GetCurrentProcess
GetLastError
FormatMessageW
SetEnvironmentVariableW
lstrcatW
lstrcmpiW
GetSystemDirectoryW
GetStartupInfoA
SearchPathW
ExpandEnvironmentStringsW
LocalAlloc
LocalFree
CreateProcessW
lstrlenW
lstrcpyW
WaitForSingleObject
CloseHandle

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a06d3c30b2d2a7e65cb59129ce23a1d9

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

crypt32

winspool.drv

user32

shell32

ntdll

imm32

userenv

msvcrt

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 280B

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 280B

.rsrc
Size: 3KB - Virtual size: 3KB