2101245b6e473dc35fd21a00b8154017

Sharing

Copy URL Twitter E-mail

General

Target

2101245b6e473dc35fd21a00b8154017
Size

19KB
MD5

2101245b6e473dc35fd21a00b8154017
SHA1

235962fafa6104c57fb90bbb4b72f58365b65698
SHA256

e6ef015c061eb67b2f61ed36db72966b099dfe1089c87730d4734cc8956845ed
SHA512

4f698d93e9693a58729d076236238e7475c52572fa1c396c63abc6c6235663f11b942f6ea9714c09d1176ad1177f139d280ba9cadde2f0a35a4772feb54ef5bb
SSDEEP

192:tPExTv9lnY4+HYfG2vioYpEVT8P/X8HDqSQprqF7s9c01+y0VDdagt6KidXN:RGTTY4+KYWVQX8jqSQZ47o1+yuf6Kid9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2101245b6e473dc35fd21a00b8154017

Files

2101245b6e473dc35fd21a00b8154017
.dll windows:4 windows x86 arch:x86

dc45019e1d55cb8954ff1e3eac3ffe49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetCurrentProcessId
ResetEvent
GetEnvironmentVariableA
_lclose
_lwrite
_lcreat
lstrcmpA
lstrlenA
WritePrivateProfileStringA
lstrcatA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
FreeLibrary
GlobalFree
WaitForSingleObject
CreateProcessA
GlobalAlloc
GetProcAddress
LoadLibraryExA
SetErrorMode
GetPrivateProfileStringA
lstrcpyA
_lread
_llseek
_lopen
SetEvent
CloseHandle
OpenEventA
WaitForMultipleObjects
MoveFileA
GetFileAttributesA
CreateDirectoryA
GetWindowsDirectoryA
DebugBreak
CreateEventA
GlobalLock
GlobalUnlock
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

msi

ord144
ord170
ord117
ord160
ord158
ord8
ord120
ord49
ord73
ord159
ord124
ord17
ord64
ord46
ord31

Exports

Exports

AltStartup
Cleanup
Startup
f0
f1
f10
f100
f101
f102
f103
f104
f105
f106
f107
f108
f109
f11
f110
f111
f112
f113
f114
f115
f116
f117
f118
f119
f12
f120
f121
f122
f123
f124
f125
f126
f127
f13
f14
f15
f16
f17
f18
f19
f2
f20
f21
f22
f23
f24
f25
f26
f27
f28
f29
f3
f30
f31
f32
f33
f34
f35
f36
f37
f38
f39
f4
f40
f41
f42
f43
f44
f45
f46
f47
f48
f49
f5
f50
f51
f52
f53
f54
f55
f56
f57
f58
f59
f6
f60
f61
f62
f63
f64
f65
f66
f67
f68
f69
f7
f70
f71
f72
f73
f74
f75
f76
f77
f78
f79
f8
f80
f81
f82
f83
f84
f85
f86
f87
f88
f89
f9
f90
f91
f92
f93
f94
f95
f96
f97
f98
f99
g0
g1
g10
g100
g101
g102
g103
g104
g105
g106
g107
g108
g109
g11
g110
g111
g112
g113
g114
g115
g116
g117
g118
g119
g12
g120
g121
g122
g123
g124
g125
g126
g127
g13
g14
g15
g16
g17
g18
g19
g2
g20
g21
g22
g23
g24
g25
g26
g27
g28
g29
g3
g30
g31
g32
g33
g34
g35
g36
g37
g38
g39
g4
g40
g41
g42
g43
g44
g45
g46
g47
g48
g49
g5
g50
g51
g52
g53
g54
g55
g56
g57
g58
g59
g6
g60
g61
g62
g63
g64
g65
g66
g67
g68
g69
g7
g70
g71
g72
g73
g74
g75
g76
g77
g78
g79
g8
g80
g81
g82
g83
g84
g85
g86
g87
g88
g89
g9
g90
g91
g92
g93
g94
g95
g96
g97
g98
g99

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc45019e1d55cb8954ff1e3eac3ffe49

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

msi

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 644B

.reloc Size: 1024B - Virtual size: 634B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 644B

.reloc
Size: 1024B - Virtual size: 634B