122bfdd890c376834aaa67dc098571b6

Sharing

Copy URL

Twitter E-mail

General

Target

122bfdd890c376834aaa67dc098571b6
Size

264KB
MD5

122bfdd890c376834aaa67dc098571b6
SHA1

a8f7221d2f13989bd1f446c6d86191b60b8cf572
SHA256

e0ab544caa161503cac97b219d63f06598dbe21d551b610783262f0cd396c8a2
SHA512

198e1e39defe16e375fe860a04489f8b83a760279239a4fdc4882550ff4e2a5f9f7a4a2e018017464e4dc140b5675bbfd15b5f6ca143a2baae8da6a2258a86ff
SSDEEP

6144:frlVrh6fSkFmTGpUpulbFrHuDpGQkwO8T62asOLNhIbwHojoDtbatbeWK:zoZ8qpUwufw8T6XLNhcwHWntbbK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122bfdd890c376834aaa67dc098571b6

Files

122bfdd890c376834aaa67dc098571b6
.exe windows:4 windows x86 arch:x86

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA

kernel32

CreateMutexA
WaitForSingleObject
GetACP
GetModuleFileNameA
GetFileAttributesA
MultiByteToWideChar
lstrcmpiA
LoadLibraryW
GetProcAddress

advapi32

RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueExA

oleaut32

UnRegisterTypeLi
LoadTypeLibEx

iphlpapi

DeleteIpForwardEntry
SetIpStatistics
InternalGetIpNetTable
GetAdaptersInfo
GetFriendlyIfIndex
InternalDeleteIpNetEntry
DeleteIpNetEntry

adsnt

DllGetClassObject

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.blKQTV
Size: 5KB - Virtual size: 911KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 97KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Tg
Size: 2KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 120KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.WDjuG
Size: 4KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee238bb9626547eef1d88167d0d6cf8e

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

oleaut32

iphlpapi

adsnt

Sections

.text Size: 16KB - Virtual size: 16KB

.blKQTV Size: 5KB - Virtual size: 911KB

.rdata Size: 1024B - Virtual size: 9KB

.edata Size: 97KB - Virtual size: 182KB

.Tg Size: 2KB - Virtual size: 71KB

.data Size: 6KB - Virtual size: 254KB

.edata Size: 120KB - Virtual size: 216KB

.WDjuG Size: 4KB - Virtual size: 729KB

.rsrc Size: 10KB - Virtual size: 9KB

.text
Size: 16KB - Virtual size: 16KB

.blKQTV
Size: 5KB - Virtual size: 911KB

.rdata
Size: 1024B - Virtual size: 9KB

.edata
Size: 97KB - Virtual size: 182KB

.Tg
Size: 2KB - Virtual size: 71KB

.data
Size: 6KB - Virtual size: 254KB

.edata
Size: 120KB - Virtual size: 216KB

.WDjuG
Size: 4KB - Virtual size: 729KB

.rsrc
Size: 10KB - Virtual size: 9KB