51edbef1cd00e17d6275001307371a5c

Sharing

Copy URL Twitter E-mail

General

Target

51edbef1cd00e17d6275001307371a5c
Size

1.0MB
MD5

51edbef1cd00e17d6275001307371a5c
SHA1

137bf5961d9be41ea748895c0bb74d565e477934
SHA256

48e7637a42048a4caba706f8136ac473e84cbce9cbb94f62b2e2ece3781ed79b
SHA512

b51050f7249aace5b52c76e47629fe5aeec34fe67eee8bdc8a98bfbb114701f9f19664a9b0bef146eb4a26256b5533348376c784bc9d71668cd2d652e2e0e414
SSDEEP

12288:x0JPrg1+E45wbJ9lpSxe9rCas+c/ADJTAVMBfMCzopT7hBeRwNlZ4PM9PnbA5WR9:xuPrbdwbbSYWas+c/GAVMNMFBey+cykh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51edbef1cd00e17d6275001307371a5c

Files

51edbef1cd00e17d6275001307371a5c
.exe windows:4 windows x86 arch:x86

c47372ab709afdff84724181e9420c65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

setupapi

SetupDiBuildDriverInfoList
SetupDiDestroyDriverInfoList
SetupDiGetDeviceInstallParamsW
SetupDiGetDriverInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

kernel32

CreateProcessW
GetExitCodeProcess
LoadLibraryW
GetProcAddress
GetCurrentThread
LocalFree
LeaveCriticalSection
FormatMessageW
GetVersionExW
HeapFree
GetProcessHeap
GetSystemTimeAsFileTime
GetSystemInfo
FileTimeToLocalFileTime
WaitForMultipleObjects
UnmapViewOfFile
SetThreadPriority
CreateMutexW
WriteFile
FlushFileBuffers
ResumeThread
SystemTimeToFileTime
FileTimeToSystemTime
OpenFileMappingW
GetTickCount
ReadFile
CreateFileW
OpenMutexW
ReleaseMutex
GetWindowsDirectoryW
FindClose
GetStartupInfoW
GetCurrentProcess
GetStdHandle
SetLastError
GetFileAttributesW
GetSystemDirectoryW
WideCharToMultiByte
GetUserDefaultUILanguage
GetSystemDefaultLangID
GlobalMemoryStatusEx
QueryPerformanceFrequency
SetThreadAffinityMask
QueryPerformanceCounter
GetProcessAffinityMask
GetSystemDirectoryA
DeviceIoControl
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetModuleHandleExW
OutputDebugStringW
EnterCriticalSection
SetEvent
FreeLibrary
InterlockedDecrement
lstrcmpiW
DeleteCriticalSection
InterlockedIncrement
RaiseException
LoadLibraryExW
GetModuleHandleW
FindResourceW
GetModuleFileNameW
GetCurrentThreadId
LoadResource
Sleep
SizeofResource
GetLastError
WaitForSingleObject
lstrlenW
MultiByteToWideChar
CloseHandle
CreateThread
InitializeCriticalSection
CreateEventW
GetCommandLineW
IsWow64Process
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetFilePointer
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
GetStartupInfoA
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
ExitProcess
GetModuleHandleA
HeapSize
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetCPInfo
GetStringTypeW
GetStringTypeA
RtlUnwind
FindFirstFileA
GetDriveTypeA
ExitThread
GetFileType
SetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
HeapReAlloc
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange

user32

GetMonitorInfoW
MonitorFromPoint
EnumDisplayDevicesW
EnumDisplaySettingsExW
UnregisterClassA
PostThreadMessageW
CharNextW
GetMessageW
TranslateMessage
DispatchMessageW
CharUpperW
GetSystemMetrics
EnumDisplaySettingsW

advapi32

RegQueryInfoKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
EqualSid
GetAclInformation
DeleteAce
AddAce
AddAccessAllowedAce
GetAce
IsValidSid
LookupAccountNameW
CopySid
GetSecurityDescriptorLength
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
MakeSelfRelativeSD
GetSecurityDescriptorSacl
FreeSid
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
MakeAbsoluteSD
GetLengthSid
SetTokenInformation
ConvertStringSidToSidW
OpenThreadToken
ImpersonateSelf
RevertToSelf
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExW

ole32

CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoSetProxyBlanket

oleaut32

UnRegisterTypeLi
SysAllocString
SafeArrayGetElement
SafeArrayGetLBound
VariantCopy
VariantInit
VariantClear
VariantChangeType
LoadRegTypeLi
SysStringLen
SysFreeString
RegisterTypeLi
LoadTypeLi
VarUI4FromStr

Sections

.text
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c47372ab709afdff84724181e9420c65

Headers

File Characteristics

Imports

version

setupapi

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 516KB - Virtual size: 513KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 24KB - Virtual size: 31KB

.rsrc Size: 144KB - Virtual size: 143KB

.srdata Size: 72KB - Virtual size: 72KB

.text
Size: 516KB - Virtual size: 513KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 24KB - Virtual size: 31KB

.rsrc
Size: 144KB - Virtual size: 143KB

.srdata
Size: 72KB - Virtual size: 72KB