105f73a737ac168661e6c7e1a9c94211

Sharing

Copy URL Twitter E-mail

General

Target

105f73a737ac168661e6c7e1a9c94211
Size

125KB
MD5

105f73a737ac168661e6c7e1a9c94211
SHA1

15cc04979e1f75830c23f14e949a66e96bbc5b58
SHA256

3336e9844a757cbc9d4b8a61163889cef5fa0f69aebe33080a723e51786d4b69
SHA512

abdbd3c35528c26e414990c7394f3be1a749c81659a6e242cd0cfd07bd7b9cedfba938cbb1ecedf03b9a1c3efe9f3c4db81dcef3b24160e9c0c1017e1502fdc2
SSDEEP

1536:EDwP9gfEZmUR8oeIRn+XcN+y5X/inD0HiA1Tj9Wj3yw9kYzPo7vVA:uQoPUR8oX+XcNv5XqYL1cmhYzPo7vV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105f73a737ac168661e6c7e1a9c94211

Files

105f73a737ac168661e6c7e1a9c94211
.exe windows:4 windows x86 arch:x86

dd8928d5c91b7903f4e56042d2961d94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetCurrentThreadId
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetSystemDirectoryA
GetLocalTime
SetLastError
lstrlenA
lstrcpyA
lstrcatA
FindResourceA
HeapFree
LoadResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
FreeResource
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeW

user32

PostThreadMessageA
GetMessageA
wsprintfA
GetInputState

advapi32

RegDeleteValueA
GetUserNameA
QueryServiceStatus
ControlService
DeleteService
RegQueryValueExA
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA

shlwapi

SHDeleteKeyA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd8928d5c91b7903f4e56042d2961d94

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

netapi32

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 88KB - Virtual size: 84KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 88KB - Virtual size: 84KB