04d8761dcd07581024d2fd7de2c65558

Sharing

Copy URL

Twitter E-mail

General

Target

04d8761dcd07581024d2fd7de2c65558
Size

56KB
MD5

04d8761dcd07581024d2fd7de2c65558
SHA1

09259c74f77b8edbcffb5fe888355c31eeba4a23
SHA256

dc28206c6301c240a408fc99d61bb8bc1b8422c01d08f0c48c6a40b4d057398c
SHA512

33e14057a339e6b59df7aebcd0d4bca01cd77d6cad9ca2303bb2c636c62d5b772a242f3b909682410bd85332f97167d82bdab6f9a2fc0358680ea1c325e06646
SSDEEP

768:WvTXTUgVfePy8vFPOTVIOMIQSygAVL4sbD9Pl0LxdGjAhoT/bmyfiA+mRj4RRO:uTIeWPVO4L4Qip0359sRO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d8761dcd07581024d2fd7de2c65558

Files

04d8761dcd07581024d2fd7de2c65558
.exe windows:4 windows x86 arch:x86

bd15c862dd2d91b8c4d88cebe416417f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
lstrcatA
lstrcpyA
SetLastError
LoadLibraryA
GetLastError
ReadFile
SetFilePointer
LocalFileTimeToFileTime
Sleep
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateDirectoryA
CreateThread
GetCurrentThreadId
GetModuleHandleA
DuplicateHandle
SetFileTime
SizeofResource
GetStartupInfoA
WriteFile
lstrlenA
FreeResource
lstrcmpiA
ExitProcess
GetWindowsDirectoryA
ReadProcessMemory
VirtualFree
VirtualAlloc
GetSystemDirectoryA
LoadLibraryExA
GetProcAddress
FreeLibrary
OpenProcess
CloseHandle
CreateToolhelp32Snapshot
Process32First
Process32Next
GetModuleFileNameA
GetCurrentProcess

user32

LoadCursorA
RegisterClassExA
CreateWindowExA
UpdateWindow
LoadIconA
DispatchMessageA
DefWindowProcA
SendMessageA
ShowWindow
GetMessageA
TranslateMessage
PostThreadMessageA
GetInputState
GetForegroundWindow
wsprintfA

advapi32

RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
StartServiceA
OpenServiceA

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
_strcmpi
strstr
printf
strrchr
strncpy
realloc
malloc
strtok
??2@YAPAXI@Z
_except_handler3
strchr
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit

psapi

GetModuleFileNameExA
EnumProcessModules

Sections

.ZP
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TTS
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TMD
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd15c862dd2d91b8c4d88cebe416417f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

psapi

Sections

.ZP Size: 8KB - Virtual size: 7KB

.TTS Size: 4KB - Virtual size: 3KB

.TMD Size: 4KB - Virtual size: 2KB

.rsrc Size: 36KB - Virtual size: 36KB

.ZP
Size: 8KB - Virtual size: 7KB

.TTS
Size: 4KB - Virtual size: 3KB

.TMD
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 36KB - Virtual size: 36KB