1c4b31d105d2ee3568815e928f7eda99

General

Target

1c4b31d105d2ee3568815e928f7eda99
Size

169KB
MD5

1c4b31d105d2ee3568815e928f7eda99
SHA1

202ef54ba72f1896cebd809adbfccfc0e1b8c01b
SHA256

81e4628afcdef4156969b2f9bb28e8e960c3a7eb6c6807b85f5f414677beb46c
SHA512

6fc782fee1bfdf24c4f5c8821f6907dec37be79932326d462b8930c8a731a0cb8c676d9f9fe88e01297385f0fe33e73ae3a81c48ab932b1d8dbe52601451a296
SSDEEP

3072:7Zl7e7ve/RNnEbaTT6Sn1ccJWyyShXDfBXoKGw9G1NEQXsBOTFgM9hgyoHfTDB:Vte7W/s6mj+XvuNHs8TF9hgZbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4b31d105d2ee3568815e928f7eda99

Files

1c4b31d105d2ee3568815e928f7eda99
.exe windows:4 windows x86 arch:x86

eb81423550e97798b7ae30f3673deecb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetFileAttributesA
SetStdHandle
GetCurrentThreadId
lstrcmpA
MulDiv
GetOEMCP
GetEnvironmentStrings
ReadFile
AddAtomA
DeleteCriticalSection
FreeEnvironmentStringsA
GetLastError
GetDiskFreeSpaceA
SetUnhandledExceptionFilter
GetThreadLocale
Sleep
lstrlenA
FreeLibrary
CloseHandle
lstrcpyA
MultiByteToWideChar
EnterCriticalSection
GetFullPathNameA
VirtualProtect
SetFilePointer
LoadLibraryA
GetModuleHandleA
InitializeCriticalSection
EnumResourceNamesW
GetStringTypeW
FlushFileBuffers
lstrcatA
LeaveCriticalSection
GetCPInfo
GetStringTypeA
GetTickCount
IsBadReadPtr
WriteFile
FreeEnvironmentStringsW
lstrlenW
FindFirstFileA
LCMapStringA
CreateFileA
UnhandledExceptionFilter
GetStartupInfoA
LCMapStringW
GetProcAddress
WideCharToMultiByte
lstrcpynA
GetEnvironmentStringsW
lstrcmpiA
IsBadCodePtr
RaiseException

Sections

.text
Size: 90KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb81423550e97798b7ae30f3673deecb

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 90KB - Virtual size: 490KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 75KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 90KB - Virtual size: 490KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 75KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB