521ab406d9b0a674b37395757988bd84

Sharing

Copy URL Twitter E-mail

General

Target

521ab406d9b0a674b37395757988bd84
Size

60KB
MD5

521ab406d9b0a674b37395757988bd84
SHA1

d21e30102bc70c929216ae549c87f484b9edca0d
SHA256

5caff58ee99b9aef8c1cf8c235389a33a83dd5ce09d2cced3f1c4c68d598edba
SHA512

bd4cfabfe355fb7267a8cfda5956c8882762fb1b7945623e74e283ce6e6afa0d27713b72884610606f26f2502162ad69b2caa2ab8a57dd22ca57a7c8a6a311a6
SSDEEP

768:H2p0zjOy3fOC+dR3wwiyad6kI2UYi0vbSk+UgmMXhjhd6xIQ8gpQ3uc:HE0PvOxdZwwkNv2lYpQec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
521ab406d9b0a674b37395757988bd84

Files

521ab406d9b0a674b37395757988bd84
.exe windows:4 windows x86 arch:x86

7af98f40314282d7c9398f178828b67b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
WriteFileEx
InterlockedIncrement
FreeEnvironmentStringsA
InitializeCriticalSection
HeapSize
LCMapStringW
InterlockedDecrement
GlobalLock
SetHandleCount
LocalAlloc
GetStringTypeA
ReleaseMutex
TlsFree
lstrlenW
GetLocaleInfoA
CreateProcessA
SetFilePointerEx
TlsGetValue
GetEnvironmentStrings
GlobalUnlock
InterlockedCompareExchange
ReadFile
DeleteFileA
CompareStringA
CreateFileA
GetModuleFileNameW
SizeofResource
VirtualFree
FormatMessageW
GetFileType
RaiseException
FlushFileBuffers
LCMapStringA
WaitForMultipleObjectsEx
GetCurrentDirectoryA
DeleteFileW
SetEvent
GetModuleHandleA
SetStdHandle
CreateThread
FindCloseChangeNotification
ReadFileEx
CreateEventW
GetFileAttributesA
LocalFree
GetFileSize
LoadResource
FindClose
GetFileAttributesW
LockResource
TlsSetValue
CompareStringW
GetExitCodeProcess
GetStringTypeW
GetThreadLocale
InterlockedExchangeAdd
GetStdHandle
ResetEvent
SetErrorMode
VirtualAlloc
GetModuleHandleW
GetCurrentProcess
SetLastError
GetLastError
GetStartupInfoA

gdi32

CreateDCA
CreatePolygonRgn
CreateRectRgn
CreateSolidBrush
CreateFontIndirectA
CreateRoundRectRgn

setupapi

SetupUninstallOEMInfA

advapi32

RegSetKeySecurity
ControlService
RegGetKeySecurity
RegConnectRegistryA
RegQueryValueExA
EnumServicesStatusA
GetUserNameA
InitiateSystemShutdownA
RegEnumKeyExA
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
RegSetValueExA
RegEnumValueA
RegRestoreKeyA
OpenServiceA
RegOpenKeyExA
RegCloseKey
RegNotifyChangeKeyValue
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
QueryServiceStatus
RegFlushKey
RegCreateKeyExA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7af98f40314282d7c9398f178828b67b

Headers

File Characteristics

Imports

kernel32

gdi32

setupapi

advapi32

msvcrt

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 32KB - Virtual size: 112KB

.rsrc Size: 12KB - Virtual size: 9KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 32KB - Virtual size: 112KB

.rsrc
Size: 12KB - Virtual size: 9KB