350bd3b0b2a988a04486d22b409e9975

General

Target

350bd3b0b2a988a04486d22b409e9975
Size

10.5MB
MD5

350bd3b0b2a988a04486d22b409e9975
SHA1

7d47fced82eeac5c4f73e651c472424469a0f561
SHA256

8df2e3e2cbc21868cf3acada36351444d70179ec97c46a3ef27ec3ce4cd5e069
SHA512

df28ff3fdd49509ec44ae5e9fd18d0261cd6afa3cb4542e3bd3e99c3d703296f5d7fc416f29c809756a188a426c5ec65944ef36d24e4e74809b9e41eb4499bed
SSDEEP

3072:rVSA/SsuaW0G4uXQgwQpcCLti0ulGMYM1:5asBW06XQpQpFpTulG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
350bd3b0b2a988a04486d22b409e9975

Files

350bd3b0b2a988a04486d22b409e9975
.exe windows:5 windows x86 arch:x86

5f9b80ef8cb23d7ca50353f819069ffd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetProcAddress
LoadLibraryA
SetErrorMode
Sleep
CreateMutexW
GetSystemDirectoryW
InterlockedIncrement
GetModuleHandleW
CreateSemaphoreW
CreateFileMappingA
LoadLibraryW
GetCommandLineA
GetLongPathNameA
GetOEMCP
HeapCreate
GetTickCount

advapi32

OpenServiceW
RegCloseKey
RegUnLoadKeyA
RegSaveKeyW
OpenEventLogW
RegOpenKeyA
LogonUserA
RegDeleteValueW
RegEnumKeyW
CryptSignHashA
RegLoadKeyA
RegRestoreKeyA
RegReplaceKeyW

dbnmpntw

ConnectionRead
ConnectionError

shlwapi

UrlIsW
UrlHashA
UrlCanonicalizeW
PathCommonPrefixA
UrlGetPartW
UrlEscapeA
UrlCreateFromPathW
PathIsURLA
UrlCombineA
PathCombineA
UrlGetLocationA
UrlCompareW
PathIsRootA
PathCompactPathA

user32

LoadBitmapW
DispatchMessageA
InsertMenuA
CharToOemW
PeekMessageA
DialogBoxParamA
GetMessageA
GetPropA
PostMessageA
FindWindowA
LoadMenuA
LoadIconW
LoadCursorA

Exports

Exports

grre

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.5MB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f9b80ef8cb23d7ca50353f819069ffd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

dbnmpntw

shlwapi

user32

Exports

Exports

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 976B

.rsrc Size: 10.5MB - Virtual size: 384B

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 976B

.rsrc
Size: 10.5MB - Virtual size: 384B