1b243c3af0eb965d4763283b0f9c074a

Sharing

Copy URL Twitter E-mail

General

Target

1b243c3af0eb965d4763283b0f9c074a
Size

41KB
MD5

1b243c3af0eb965d4763283b0f9c074a
SHA1

92c8bbecc1fbf0fa134df6c2091eda810ba371a6
SHA256

52c80c08fe597e1fcad59f89044a60c0c93eb84e8a0e0c7c6abd7c422e169d95
SHA512

ade82b23baf11e492ea2974606958dd735c2f98bd3c9b6e0a03334dd23c6353851642e1aa51bd868905461093c104e4030be49438f0e66de0f326ffe4748f9f1
SSDEEP

768:ZKg5pxl6lYeOE8Ig04q32DIDhTdff8qUGAUuxnjD:ZPemd072Y598Zdxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b243c3af0eb965d4763283b0f9c074a

Files

1b243c3af0eb965d4763283b0f9c074a
.exe windows:5 windows x86 arch:x86

18ab9b83a5bcff8eafdad2eaa4fde56a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserGeoID
GetSystemTimeAsFileTime
Process32NextW
GetTimeFormatA
FindNextVolumeMountPointW
CreateToolhelp32Snapshot
TerminateJobObject
SetConsoleInputExeNameW
HeapCompact
ReadConsoleOutputAttribute
HeapCreate
EnumCalendarInfoExA
GetStringTypeExW
ConvertDefaultLocale
SetLocalTime
WriteConsoleOutputCharacterW
WriteConsoleOutputA
SetComputerNameExA
GetDiskFreeSpaceW
DebugActiveProcess
FindResourceExW
SetCommMask
ResetEvent
LockResource
PrivCopyFileExW
GetExpandedNameA
GetPrivateProfileStringW
LeaveCriticalSection
lstrlen
SetCalendarInfoA
RtlCaptureStackBackTrace
LCMapStringW
RegisterConsoleIME
EnumUILanguagesW
FindCloseChangeNotification
GetModuleHandleExA
CreateSemaphoreW
GetSystemInfo
SetComputerNameA
GetProfileIntA
GetSystemDefaultLCID
ExitProcess
GetSystemTimeAdjustment
CompareStringW
VirtualAlloc
VirtualUnlock
FindActCtxSectionStringW
MultiByteToWideChar
GetACP
GetModuleHandleA
GetCPInfoExW
WaitForDebugEvent
SetStdHandle
DosDateTimeToFileTime
GetUserDefaultLCID
SetClientTimeZoneInformation
GetConsoleCommandHistoryW
LoadLibraryA
DnsHostnameToComputerNameA
GlobalUnWire
SetThreadExecutionState
GlobalUnfix
GetUserDefaultLangID
CreateJobSet
GetStartupInfoA
FlushInstructionCache
LocalLock
OutputDebugStringA
DelayLoadFailureHook
DeleteFiber

wmi

WmiFreeBuffer
CreateTraceInstanceId
WmiQueryAllDataW
WmiNotificationRegistrationW
WmiOpenBlock
StartTraceW
QueryAllTracesW
WmiFileHandleToInstanceNameA
ProcessTrace
WmiSetSingleInstanceW
GetTraceEnableLevel
WmiMofEnumerateResourcesA
WmiQueryAllDataA
OpenTraceW
OpenTraceA
ControlTraceA
StartTraceA
ControlTraceW
QueryAllTracesA
GetTraceLoggerHandle
WmiSetSingleItemW
WmiFileHandleToInstanceNameW
WmiDevInstToInstanceNameW
RegisterTraceGuidsW
UnregisterTraceGuids
WmiSetSingleInstanceA
WmiNotificationRegistrationA
WmiSetSingleItemA

msdart

?IsWriteUnlocked@CLKRHashTable@@QBE_NXZ
?GetSpinCount@CCritSec@@QBEGXZ
?_LockSpin@CReaderWriterLock@@AAEX_N@Z
?ReadOrWriteLock@CSpinLock@@QAE_NXZ
?_WriteLockSpin@CReaderWriterLock@@AAEXXZ
?TryWriteLock@CReaderWriterLock2@@QAE_NXZ
?IsWriteUnlocked@CReaderWriterLock@@QBE_NXZ
?GetDefaultSpinCount@CReaderWriterLock3@@SGGXZ
?GetDefaultSpinCount@CCritSec@@SGGXZ
?IsReadLocked@CReaderWriterLock2@@QBE_NXZ
?GetDefaultSpinCount@CReaderWriterLock@@SGGXZ
?IsWriteLocked@CFakeLock@@QBE_NXZ
?IsUnlocked@CLockedSingleList@@QBE_NXZ
?_TryReadLock@CReaderWriterLock2@@AAE_NXZ
??1CReaderWriterLock@@QAE@XZ
?_CurrentThreadId@CSmallSpinLock@@CGJXZ
?ReadOrWriteUnlock@CReaderWriterLock3@@QAEX_N@Z
?_H1@CLKRLinearHashTable@@ABEKK@Z
?_CurrentThreadId@CSpinLock@@CGJXZ
??4CLKRHashTableStats@@QAEAAV0@ABV0@@Z
?IsWriteUnlocked@CSmallSpinLock@@QBE_NXZ
?ReadUnlock@CFakeLock@@QAEXXZ
?Lock@CLockedSingleList@@QAEXXZ
?_DeleteKey@CLKRLinearHashTable@@AAE?AW4LK_RETCODE@@KK@Z
?ReadUnlock@CLKRHashTable@@QBEXXZ

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18ab9b83a5bcff8eafdad2eaa4fde56a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

wmi

msdart

Sections

.text Size: 33KB - Virtual size: 32KB

.rdata Size: 7KB - Virtual size: 7KB

.text
Size: 33KB - Virtual size: 32KB

.rdata
Size: 7KB - Virtual size: 7KB