053d7464bfbc95448a1221937ee2e014

General

Target

053d7464bfbc95448a1221937ee2e014
Size

192KB
MD5

053d7464bfbc95448a1221937ee2e014
SHA1

c33a2922ab3df7c171e3a1aaf64e145eae8d363d
SHA256

27eea7ce72957f0f7d545e5fd0f793d6457243973c1533f5de2ce06c3da0d342
SHA512

170d9df99bfbb84d89c602e829fecfd17834846b28cbc0ae67f5b22ec24bf5df848f60624469eb35f7f8aa89d5498338de9e20cbf61604441bd289fc6830171b
SSDEEP

3072:1gNwYKZgYjnrfA6dSjXAAwr6PjBfbQCXmXR0qLlhz/lghtoG8YBjlD5swmPke:cwYKZgYvfA6dmnwq2nh0gqhtoG8YJleU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
053d7464bfbc95448a1221937ee2e014

Files

053d7464bfbc95448a1221937ee2e014
.exe windows:4 windows x86 arch:x86

cd76d021c6c4f27b377f7f96ad2fde14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

shlwapi

StrStrIA
SHSetValueA
SHEnumKeyExA
SHGetValueA
SHEnumValueA

rpcrt4

UuidToStringA

advapi32

CreateServiceA
CryptReleaseContext
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
CryptGenRandom
CloseServiceHandle
RegOpenKeyExA
CryptAcquireContextA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

user32

wsprintfA

shell32

SHGetSpecialFolderPathA

msvcrt

rand
fclose
fwrite
fopen
strlen
sprintf
tolower
strcpy
ispunct
??2@YAPAXI@Z
printf
wctomb
__mb_cur_max
isspace
strerror
isupper
isgraph
isxdigit
isalpha
islower
isdigit
atoi
strncpy
wcscpy
mbstowcs
srand
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcat
time
memcmp
malloc
free
memset
memcpy
isalnum

imagehlp

ImageNtHeader

kernel32

GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetLastError
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
GetModuleHandleA
FindNextFileA
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
GetStartupInfoA

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd76d021c6c4f27b377f7f96ad2fde14

Headers

File Characteristics

Imports

ole32

shlwapi

rpcrt4

advapi32

user32

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 112KB - Virtual size: 109KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 112KB - Virtual size: 109KB