141abdac05ed2c7e09997507b752f043

General

Target

141abdac05ed2c7e09997507b752f043
Size

275KB
MD5

141abdac05ed2c7e09997507b752f043
SHA1

2196b51457abea82d2c198c781e8850d2fdec168
SHA256

d008c0a4955d4eb79c7db20215d1fb9972a3d66e851673ca98e179d5aaf90daa
SHA512

5ca80408640f972d2a9d10a622ee92d10915183401f45167ab1fdac6ff42b831d029253c95e349161d927a03bc767a35aed1b00fb41392fe49d148b3d7ef70e1
SSDEEP

6144:Wox82hfRSVD1j9tZj+/eSufLbOPG1CbLsHZBio7/+Q/SjlFQo:jyWfAxj3ZjKeSuftgXuUo7DSjl1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141abdac05ed2c7e09997507b752f043

Files

141abdac05ed2c7e09997507b752f043
.exe windows:4 windows x86 arch:x86

d0f3c1471955e6eb5d3b660205490227

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
VirtualProtect
SystemTimeToFileTime
CreateMutexW
Sleep
GetEnvironmentVariableW
EnterCriticalSection
VirtualAlloc
GetAtomNameW
TryEnterCriticalSection
LeaveCriticalSection
GetTickCount
OpenMutexW
GlobalLock
GetSystemTime
SetFileTime
lstrcpyA
GetFileTime
GetFileAttributesA
UnmapViewOfFile
GetCommandLineA
GetModuleHandleA

user32

SetThreadDesktop
GetClipboardData
FindWindowExA
OpenWindowStationA
SetProcessWindowStation
GetClassNameA
SendMessageA
CloseWindowStation
PeekMessageA
DrawIcon
GetDlgItem
DispatchMessageA
MsgWaitForMultipleObjects
GetWindowLongA

advapi32

DuplicateTokenEx
RegEnumKeyExA
CryptHashData
RegCreateKeyExA
RegDeleteValueA
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegCloseKey
CryptAcquireContextW

shlwapi

PathMatchSpecW
wvnsprintfA
wnsprintfW
PathFileExistsW
PathRemoveFileSpecW
PathFindFileNameW
PathCombineW
StrCmpNIW
StrStrW
SHDeleteKeyA

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0f3c1471955e6eb5d3b660205490227

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20KB