081591f44360c6cb37618688769a43ad

General

Target

081591f44360c6cb37618688769a43ad
Size

132KB
MD5

081591f44360c6cb37618688769a43ad
SHA1

8c49c1d39cf5620002b5b8499690202d54fe17bf
SHA256

52ac3a54c2d6583beca88768439116c402f57de41a12094a2e9dc598fe06d918
SHA512

a5cb69e04a71c4bdf11b8f45a40883ba23bdf96197dc0a624c67ca5422eab228813e0787c0ad67fbc23bc95efae610aec8b060a57b334b0c24fd2a29e63828d6
SSDEEP

1536:mKam08eU3+JsM1qt+DolCaRyupKCyW1ZanFHBLvKuRVwuDQjbibO3Jf:ZaQekjM1qt+yRTnZZylBDKXuDQjbibS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081591f44360c6cb37618688769a43ad

Files

081591f44360c6cb37618688769a43ad
.exe windows:4 windows x86 arch:x86

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetModuleFileNameA
CreateThread
GetTempPathA
lstrlenA
GetEnvironmentVariableA
CopyFileA
GetSystemDirectoryA
CompareStringW
CompareStringA
lstrcpyA
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
CreateProcessA
ResumeThread
CreateFileA
GetFileSize
ReadFile
CloseHandle
FindFirstFileA
HeapAlloc
WriteFile
FindClose
Sleep
GetTickCount
lstrcatA
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
GetLastError
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetVersionExA
HeapDestroy
HeapCreate
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA

user32

wsprintfA

advapi32

RegQueryValueExA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
RegOpenKeyA
CloseServiceHandle
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e96c4bed2e87ac488cc029ff034f5a04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 4KB - Virtual size: 1KB