53397094dbd937ef05b0e134a282c265

General

Target

53397094dbd937ef05b0e134a282c265
Size

188KB
MD5

53397094dbd937ef05b0e134a282c265
SHA1

caab0abc9d1b57c5c0555987c7baf282f34f63c5
SHA256

c6e004ce8f1b8dfb399ec68a233e1a3a81cf64c881e47f81ec31463314d1c077
SHA512

fb912f41a7151e5c65cbbd4e82c4fa163e527da3e4d7f510a0cc4b11ca70755af4918ae51ee2374d0d53896437f3aa331765446a33c90c099b898b51fa192866
SSDEEP

3072:tCSdgcPm7U2kTuP91jcg4elu5tm+r84o17EFXwy0vwanksgcI:tfdnPmETuP9eg/ui684NFv0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53397094dbd937ef05b0e134a282c265

Files

53397094dbd937ef05b0e134a282c265
.exe windows:4 windows x86 arch:x86

23e6ae52db19970eda881583f4cb0475

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
StartServiceA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
ChangeServiceConfig2A
CloseServiceHandle
DeleteService
RegRestoreKeyA
RegSaveKeyA
CreateServiceA
ControlService
GetServiceDisplayNameA
GetServiceKeyNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

kernel32

Sleep
GetProcAddress
GetModuleHandleA
GetLastError
ExitProcess
LoadLibraryA
GetCurrentDirectoryA
GetTempPathA
MoveFileA
CloseHandle
SetFileTime
GetFileTime
WriteFile
GetCurrentThreadId
CreateFileA
GetSystemDirectoryA
SleepEx
GetModuleFileNameA
WaitForSingleObject
CreateEventA
GetTickCount
GetFileAttributesA
GetShortPathNameA
ExpandEnvironmentStringsA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentProcess
CreateDirectoryA
DeleteFileA
SetFileAttributesA
lstrlenA
GetCurrentProcessId
GetCurrentThread
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

rand
memmove
??2@YAPAXI@Z
srand
__CxxFrameHandler
memcpy
strcmp
strncpy
_ftol
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strupr
_strlwr
strlen
memset
strcpy
strcat
_except_handler3
_strrev
_stricmp

ws2_32

listen

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23e6ae52db19970eda881583f4cb0475

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

ws2_32

Sections

.text Size: 12KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 164KB - Virtual size: 164KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 164KB - Virtual size: 164KB

.rsrc
Size: 4KB - Virtual size: 3KB