111bcfc534ab093dbe9cf45cacf3a39b

General

Target

111bcfc534ab093dbe9cf45cacf3a39b
Size

89KB
MD5

111bcfc534ab093dbe9cf45cacf3a39b
SHA1

f682eabd4939bcc76f29b66756b0b4c71e688eb6
SHA256

e24bf87c96fcc629d53d2332480c8421a59c62bc84c9d07da6216fed41b630f2
SHA512

0e4a33a9a9b51204a090d42aaf8e6644266e6cd38826260f78ed6e4808d6f3788e9bd8f4d05b2672877729cf80968c082253cc98a9d792256d32834f3be90345
SSDEEP

1536:qgEZgyAcKpOZlh6Bi1Yi12A+F2Ap7eS7p+TkNj1gnzV3WI6EFA:nEZgyDKiX6uFS7ZAyZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111bcfc534ab093dbe9cf45cacf3a39b

Files

111bcfc534ab093dbe9cf45cacf3a39b
.exe windows:5 windows x86 arch:x86

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

user32

wsprintfA
CharNextA
LoadStringA
MessageBoxA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

InitializeCriticalSection
lstrlenW
SetHandleInformation
EnterCriticalSection
CreatePipe
WideCharToMultiByte
GetStartupInfoA
lstrcmpiA
MultiByteToWideChar
CreateJobSet
GetSystemDirectoryA
LoadResource
LeaveCriticalSection
LoadLibraryExA
lstrlenA
GetTickCount
GetModuleFileNameA
CreateProcessA
RaiseException
QueryPerformanceCounter
OutputDebugStringA
lstrcpynA
CloseHandle
WriteFile
GetThreadLocale
GetVersionExA
InterlockedDecrement
MoveFileA
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
CreateFileA
IsDBCSLeadByte
InterlockedExchange
LockResource
GetLocaleInfoA
DeleteFileA
ExitProcess
lstrcatA
SetVolumeLabelA
OpenSemaphoreA
GetProcAddress
DeleteCriticalSection
FreeLibrary
GetSystemTimeAsFileTime
ReadFile
SizeofResource
GetLastError
InterlockedIncrement
GetShortPathNameA
FindResourceA
GetACP

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sssa
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 139KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e725aaabc5e0bf4499be9b1da4dc7de

Headers

File Characteristics

Imports

advapi32

user32

version

kernel32

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 119KB

.sssa Size: 3KB - Virtual size: 3KB

.edata Size: 139KB - Virtual size: 251KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 119KB

.sssa
Size: 3KB - Virtual size: 3KB

.edata
Size: 139KB - Virtual size: 251KB