c98ef458940dc15ebec0dd91256021e2

General

Target

c98ef458940dc15ebec0dd91256021e2
Size

36KB
MD5

c98ef458940dc15ebec0dd91256021e2
SHA1

dc529c3b5baf1aab9658356ea408fbcefeb928a2
SHA256

cd185e4a51b1c82327410720770e47802c5eb4e3ad3f8f32499a7da00707bb36
SHA512

46b84dcd50c9abc6e14b43ee66d3cd265f17d830eea8ce2e2ea1a9421aa398c409342e09819e30246a22fea535c46cb94546a413fcf629b6de1317b548640533
SSDEEP

384:VQpmKKS+jqtF92NceQkVKF8z1zbNjCxk8OTwpRBWys:gm1S+IONcf0hNj+rOTqBWys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c98ef458940dc15ebec0dd91256021e2

Files

c98ef458940dc15ebec0dd91256021e2
.exe windows:5 windows x86 arch:x86

a3a642d9845af66356006b2255125649

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

rasapi32

DDMGetPhonebookInfo

glu32

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

msdtcprx

DTC_XaOpen
DTC_XaPrepare
DTC_XaRollback

adsldpc

ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

msrating

RatingCustomInit

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3a642d9845af66356006b2255125649

Headers

File Characteristics

Imports

rasapi32

glu32

kernel32

msdtcprx

adsldpc

msrating

mtxclu

samlib

Sections

.text Size: 2KB - Virtual size: 32KB

DATA Size: 7KB - Virtual size: 18KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 32KB

DATA
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 22KB - Virtual size: 22KB