314462dd6c98fd78165046fbc524172d

General

Target

314462dd6c98fd78165046fbc524172d
Size

163KB
MD5

314462dd6c98fd78165046fbc524172d
SHA1

af58aa4ea2626a6c48e534b41d5da67064f87221
SHA256

393c59c2b694001a1dbc580c4fe3f29edd14d0eb7d7247f30d3fb3ce67371672
SHA512

dc3e48fa09d8148fdc5c633e95514cef3de829965e71c4999d830d10db5143b076ae35cb6ff9e92a2c37bc6e614d0ef779102a05316487b215abe4d12b9eaf87
SSDEEP

3072:vXsLC3oyTrxKogoH2RiB9dW2BmeAfTioqySrfyxZDTSXoQ5j5XeRWWEQLeQQuHCB:vXTv/1H2RK9yeqioq/axTS4oeRnERfaO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314462dd6c98fd78165046fbc524172d

Files

314462dd6c98fd78165046fbc524172d
.exe windows:4 windows x86 arch:x86

4d40658bf2e9b24276fbf0d314338a2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

lstrcmpA
WideCharToMultiByte
IsBadCodePtr
LCMapStringA
GetFullPathNameA
LCMapStringW
DeleteCriticalSection
AddAtomA
SetFilePointer
GetDiskFreeSpaceA
MultiByteToWideChar
GetLastError
FindFirstFileA
FreeEnvironmentStringsW
lstrcpyA
LeaveCriticalSection
lstrcmpiA
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
MulDiv
GetTickCount
UnhandledExceptionFilter
CreateFileA
GetEnvironmentStrings
lstrcatA
EnterCriticalSection
EnumResourceNamesW
GetStringTypeW
GetModuleHandleA
WriteFile
GetThreadLocale
InitializeCriticalSection
lstrlenA
GetProcAddress
GetOEMCP
GetCurrentThreadId
GetCPInfo
SetStdHandle
ReadFile
VirtualProtect
FreeLibrary
FreeEnvironmentStringsA
FlushFileBuffers
Sleep
GetStringTypeA
lstrcpynA
LoadLibraryA
GetFileAttributesA
GetStartupInfoA
CloseHandle
lstrlenA
RaiseException

Sections

.text
Size: 85KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d40658bf2e9b24276fbf0d314338a2e

Headers

File Characteristics

Imports

setupapi

kernel32

Sections

.text Size: 85KB - Virtual size: 488KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 74KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 85KB - Virtual size: 488KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 74KB

.rsrc
Size: 512B - Virtual size: 4KB