5ef0b688829afb4ef21be25c9ecaf3ca

General

Target

5ef0b688829afb4ef21be25c9ecaf3ca
Size

44KB
MD5

5ef0b688829afb4ef21be25c9ecaf3ca
SHA1

1062f72498428f10ed178f16608936f1eb1ac1bc
SHA256

e180944fb89d9bf1c050fa4ce1e7dd4cfb22b1f791353057b9f70d0fd3cef7fa
SHA512

1a5d14f98a324fe8f9a9a38067dad562ff463887bdfcb1892d4373cec0b506a777b48c9918d91a5ba0173db9b15862b3e10addc09fcbf420ff3d209a20dad522
SSDEEP

768:eDW8E3oQflYXdSThngKR0FTPjtam/dTx0ao9PdaFp:yW9bWSThngKRMT7trRoxdaF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ef0b688829afb4ef21be25c9ecaf3ca

Files

5ef0b688829afb4ef21be25c9ecaf3ca
.dll windows:4 windows x86 arch:x86

19cc8c6092b7d919b236b76a73a3ccbf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sfc

SfcIsFileProtected

shlwapi

StrStrIA

kernel32

GetCurrentThreadId
CompareStringW
CompareStringA
RtlUnwind
CreateThread
CreateMutexA
OpenMutexA
GetSystemDirectoryA
GetCommandLineA
SetFileTime
GetFileAttributesExA
GetProcAddress
LoadLibraryA
CloseHandle
CreateFileA
CopyFileA
GetModuleFileNameA
GlobalAlloc
DeleteFileA
Sleep
GetLogicalDrives
GetDriveTypeA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
lstrcmpA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileTime
GetFileSize
SetFileAttributesA
GetFileAttributesA
GetFullPathNameA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetVersion
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19cc8c6092b7d919b236b76a73a3ccbf

Headers

File Characteristics

Imports

sfc

shlwapi

kernel32

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB