5fe01a3740a4bf8066baad5225b3ca1f

Sharing

Copy URL

Twitter E-mail

General

Target

5fe01a3740a4bf8066baad5225b3ca1f
Size

80KB
MD5

5fe01a3740a4bf8066baad5225b3ca1f
SHA1

4d5ac64ae505701ecc604abdfc5dfd5d4f841b55
SHA256

12caf70e1b08ce332ff16f81d8c61942867e9d810e45c4419cf3f129dfb817cb
SHA512

76cb96119b9c3f0e9a55c5bcff7f08908aa1b70a2b14773346974df8ced65d6b563e6e0df70596d674b60645f0135ee74ac33cd9b39389f417148f2f1b0c3723
SSDEEP

768:SW4U8fBRGBRCPiPn1RpVSpE1H8SwIYPWVkSzEqhCEjKPlquPJskmLtlVjH1Go:S/2CuqpEcSLVkSLjlaJHmLtleo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fe01a3740a4bf8066baad5225b3ca1f

Files

5fe01a3740a4bf8066baad5225b3ca1f
.exe windows:4 windows x86 arch:x86

90b46655f730e7673719e7fcecb80f4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetShortPathNameA
lstrcmpA
CreateProcessA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsA
GetFileAttributesExA
GetCurrentProcessId
FileTimeToLocalFileTime
SetFilePointer
CreateDirectoryA
GetLocalTime
FreeLibrary
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
OutputDebugStringA
lstrcatA
DeleteFileA
CreateFileA
WriteFile
MoveFileA
ResetEvent
CloseHandle
GetTickCount
Sleep
SetEvent
lstrcpyA
GetModuleFileNameA
lstrlenA
CreateEventA
CreateThread
WaitForSingleObject
TerminateThread
lstrcmpiA
FileTimeToSystemTime
GetLastError
SetStdHandle
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar

user32

wvsprintfA
wsprintfA

advapi32

RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
SetServiceStatus
RegisterServiceCtrlHandlerA
EnumServicesStatusA
CreateServiceA
StartServiceA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
ChangeServiceConfig2A
CloseServiceHandle
StartServiceCtrlDispatcherA
RegOpenKeyExA

shell32

SHGetFileInfoA
ShellExecuteA

ws2_32

inet_ntoa
gethostbyname
WSAStartup

wininet

InternetOpenUrlA
InternetReadFile
InternetSetOptionA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

shlwapi

SHDeleteKeyA
SHDeleteValueA

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90b46655f730e7673719e7fcecb80f4f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

wininet

version

shlwapi

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 16KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 16KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 1KB