04a4ab6a039e1c3b3f4b6342d096f3f6

General

Target

04a4ab6a039e1c3b3f4b6342d096f3f6
Size

178KB
MD5

04a4ab6a039e1c3b3f4b6342d096f3f6
SHA1

3abb7007685aa40355d93892592da3370af4343f
SHA256

eccaeba83ec436bae8a06168917bf11df6fd4fcfde18319755ba55b3da2ea63f
SHA512

89632885191e90b258dfa6d6e06481ed26569c28e935c15e60832e3e941bfd062983f3eabedb90cb6c6fd6387837d0ca32bdf0a3cf46a0b28d44522df41cf21f
SSDEEP

3072:6hfJcn8DAjiL5gLI3t2vrYuLWYKodHOdaas+3BjgfvmVvPK+hMJa:Kfs88ji9j3E3LWZodHSRt9gfvmNK+hMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a4ab6a039e1c3b3f4b6342d096f3f6

Files

04a4ab6a039e1c3b3f4b6342d096f3f6
.exe windows:4 windows x86 arch:x86

539e3ace69ce093c76311df320efe269

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

kernel32

TlsFree
WriteFile
GetModuleFileNameA
TerminateProcess
TlsAlloc
SetHandleCount
AddAtomA
TlsGetValue
IsBadWritePtr
UnhandledExceptionFilter
GetFileType
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
VirtualAlloc
GetCurrentProcessId
QueryPerformanceCounter
EnumResourceNamesW
InterlockedExchange
VirtualFree
GetCurrentProcess
VirtualQuery
TlsSetValue
FreeEnvironmentStringsA
HeapCreate
GetLocaleInfoA
GetACP
GetEnvironmentStringsW
GetCPInfo
lstrcatW
SetLastError
HeapDestroy
GetVersionExA
GetStartupInfoA
GetEnvironmentStrings
GetOEMCP
FreeEnvironmentStringsW
SetEndOfFile
HeapSize
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

user32

SendMessageA
GetDlgItem
EnumChildWindows
CreateWindowExW
DestroyWindow
IsWindow
GetWindowThreadProcessId

Sections

.text
Size: 92KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

539e3ace69ce093c76311df320efe269

Headers

File Characteristics

Imports

newdev

mprapi

kernel32

shell32

iphlpapi

setupapi

user32

Sections

.text Size: 92KB - Virtual size: 244KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 82KB - Virtual size: 81KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 244KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 82KB - Virtual size: 81KB

.rsrc
Size: 512B - Virtual size: 4KB