0df4895bac1bf13dcd5966c0b2b2aaae

General

Target

0df4895bac1bf13dcd5966c0b2b2aaae
Size

44KB
MD5

0df4895bac1bf13dcd5966c0b2b2aaae
SHA1

2b337643a5907f883598b4e76f5afe10ed35c81c
SHA256

c25beb0de0696b80a5b89732761c166ab84b76213f71823f08dd109065de9e20
SHA512

e2c2950cde954d8137ec96806f828c5c208e08e72499f74c05bc0da865690e1b9f7f4d8505db5f423be221e3632d7c726f6ec6ac4a0bfa47b4da6b337f0863a2
SSDEEP

768:nzN8fAElvX5691Wkgl5X04KtluVJHzJqqU:n58fAElvpbk45X0VtUVJHzJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df4895bac1bf13dcd5966c0b2b2aaae

Files

0df4895bac1bf13dcd5966c0b2b2aaae
.exe windows:5 windows x86 arch:x86

b777e09e5bd91114cbfc545648f8f4f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey

kernel32

lstrcpyA
GetFileAttributesA
CopyFileA
GetDriveTypeA
lstrcatA
MultiByteToWideChar
CreateDirectoryA
SetFileAttributesA
GetWindowsDirectoryA
GetLastError
GetModuleFileNameA
GlobalMemoryStatus
lstrcmpiA
ExitProcess
GetStartupInfoA
LoadLibraryA
lstrlenA
GetModuleHandleA
GetCommandLineA
LocalFree
lstrcpynA
LocalAlloc
IsDBCSLeadByte
FreeLibrary
CloseHandle
CreateFileA
SetCurrentDirectoryA
WriteFile
SetFilePointer
lstrcmpA
ReadFile
GetFileSize
GetSystemDirectoryA
SetErrorMode
GetProcAddress
GetVersionExA
ExpandEnvironmentStringsA
FindFirstFileA
GetPrivateProfileStringA
FindClose

user32

wsprintfA
CharPrevA
CharUpperA
MessageBoxA
CharNextA
LoadStringA
CharLowerA

shell32

ord179
SHChangeNotify
SHFileOperationA

ole32

OleUninitialize
CoCreateInstance
OleInitialize

advpack

GetVersionFromFile
RegRestoreAll
DelNode
ExecuteCab
RunSetupCommand

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b777e09e5bd91114cbfc545648f8f4f6

Headers

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

advpack

version

Sections

.text Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 576B

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 576B

.rsrc
Size: 12KB - Virtual size: 12KB