04eb44e345cd882a0039e093018ec46b

Sharing

Copy URL Twitter E-mail

General

Target

04eb44e345cd882a0039e093018ec46b
Size

53KB
MD5

04eb44e345cd882a0039e093018ec46b
SHA1

fbd821cff21e056db098b5842a2197cdd132db7f
SHA256

ac8c244e311c605f60d3fa456e5b791b3172df573f3be6e365271b86298f417b
SHA512

8764324c95d2bb74ffafea771459ac38f8e386839af3822f0d71d059b8266a2a593e1c3560b37a79317805d0c0d6e9b10a1b5aef4efb2fd2d6b73db17a8f5f5a
SSDEEP

768:+yKdCUemapg0feV/m6C9LnJbbiWXx7e3TKEmmg8MndRjBQLZQBGk/t:+fPemavGu/V/DUGvhdhBkk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04eb44e345cd882a0039e093018ec46b

Files

04eb44e345cd882a0039e093018ec46b
.exe windows:4 windows x86 arch:x86

c207299484f20959dddeb31113f8d2fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AccessCheckByTypeAndAuditAlarmW
AccessCheckByTypeResultList
AddAccessDeniedAce
BackupEventLogA
BuildImpersonateTrusteeA
BuildImpersonateTrusteeW
BuildSecurityDescriptorA
BuildTrusteeWithNameW
BuildTrusteeWithSidW
CloseEventLog
ConvertSecurityDescriptorToAccessNamedA
ConvertToAutoInheritPrivateObjectSecurity
CryptAcquireContextW
CryptGetProvParam
CryptGetUserKey
CryptImportKey
CryptReleaseContext
CryptSetProvParam
CryptSetProviderExW
ElfOpenBackupEventLogW
ElfOpenEventLogA
ElfRegisterEventSourceA
GetAuditedPermissionsFromAclW
GetCurrentHwProfileW
GetEffectiveRightsFromAclA
GetLengthSid
GetNamedSecurityInfoExA
GetSecurityDescriptorSacl
GetServiceDisplayNameW
GetTrusteeNameW
LogonUserA
LsaAddAccountRights
LsaClearAuditLog
LsaCreateTrustedDomain
LsaCreateTrustedDomainEx
LsaEnumeratePrivileges
LsaICLookupSids
LsaQueryDomainInformationPolicy
LsaRemovePrivilegesFromAccount
LsaRetrievePrivateData
LsaSetDomainInformationPolicy
LsaSetSecret
OpenServiceW
ReportEventW
SetEntriesInAuditListW

kernel32

CancelWaitableTimer
ClearCommError
CloseHandle
CreateFileMappingA
CreateIoCompletionPort
CreateMailslotA
CreatePipe
CreateRemoteThread
EnumResourceLanguagesW
ExitProcess
FileTimeToLocalFileTime
FillConsoleOutputAttribute
FlushFileBuffers
FoldStringW
FreeLibrary
GetAtomNameW
GetCommandLineA
GetCommandLineW
GetConsoleCommandHistoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesW
GetLastError
GetLocalTime
GetModuleHandleW
GetNumberFormatA
GetNumberOfConsoleFonts
GetProcessHeap
GetProfileSectionW
GetStartupInfoW
GetSystemDefaultLangID
GetSystemTime
GetThreadPriorityBoost
GetUserDefaultLCID
GetVersion
GlobalCompact
GlobalHandle
HeapCreate
HeapReAlloc
HeapUnlock
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
LocalReAlloc
MoveFileWithProgressW
OpenFile
QueryDosDeviceA
QueryDosDeviceW
QueueUserAPC
SearchPathW
SetConsoleFont
SetConsoleMaximumWindowSize
SetConsoleMenuClose
SetConsoleNumberOfCommandsW
SetDefaultCommConfigA
SetFilePointer
SetLastError
SetLocaleInfoA
SetProcessAffinityMask
SetSystemPowerState
SetVDMCurrentDirectories
SwitchToThread
TryEnterCriticalSection
VirtualProtect
WaitCommEvent
WaitNamedPipeA
WaitNamedPipeW
WritePrivateProfileSectionW
WritePrivateProfileStringA
WriteProfileSectionA
WriteProfileSectionW
_lwrite
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenW

user32

AdjustWindowRectEx
AppendMenuA
AttachThreadInput
CharUpperA
CharUpperW
CopyAcceleratorTableA
CreateIconIndirect
CreateMenu
CreateWindowExA
DdeEnableCallback
DdePostAdvise
DdeReconnect
DeferWindowPos
DestroyCaret
DestroyMenu
DlgDirListComboBoxA
DrawAnimatedRects
DrawTextA
DrawTextW
DrawTextExA
EndDialog
EnumPropsExW
EnumThreadWindows
EqualRect
ExitWindowsEx
GetAltTabInfoW
GetClassLongW
GetClipCursor
GetCursor
GetCursorInfo
GetDlgCtrlID
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetIconInfo
GetInputState
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemInfoW
GetMenuState
GetParent
GetQueueStatus
GetScrollBarInfo
GetTabbedTextExtentA
GetWindowDC
GetWindowModuleFileNameW
GetWindowTextW
IsCharAlphaNumericW
IsCharLowerA
IsCharUpperW
IsDialogMessageA
LoadBitmapW
LoadCursorW
LoadStringW
MessageBeep
MonitorFromRect
OpenDesktopW
OpenWindowStationW
PaintDesktop
RegisterClipboardFormatA
ScrollChildren
ScrollWindowEx
SendDlgItemMessageW
SetClassLongW
SetDlgItemInt
SetMessageExtraInfo
SetWindowWord
TileChildWindows
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
WINNLSGetEnableStatus
WINNLSGetIMEHotkey
WaitForInputIdle
keybd_event

gdi32

BitBlt
CombineRgn
CreateCompatibleBitmap
CreateEllipticRgnIndirect
CreateFontIndirectA
CreateSolidBrush
DeleteEnhMetaFile
DeleteMetaFile
DeviceCapabilitiesExW
EnumICMProfilesW
ExtCreatePen
ExtSelectClipRgn
GdiComment
GdiGetBatchLimit
GetBkColor
GetBkMode
GetBoundsRect
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetEnhMetaFilePaletteEntries
GetICMProfileW
GetMapMode
GetMetaFileA
GetPixel
GetTextCharset
GetTextMetricsA
GetWinMetaFileBits
MaskBlt
OffsetClipRgn
PaintRgn
PlayEnhMetaFile
Polygon
ResetDCW
RoundRect
ScaleWindowExtEx
SelectClipPath
SetColorSpace
SetDIBColorTable
SetDIBitsToDevice
SetDeviceGammaRamp
SetRelAbs
SetViewportExtEx
SetViewportOrgEx
StartDocA
UpdateICMRegKeyW

msvcrt

_cexit
_chdir
_execv
_fcloseall
_flushall
_getcwd
_getmaxstdio
_getws
_heapchk
_heapset
_hypot
_spawnve
_unlink
_wcsdup
_wcsnicoll
_wexeclp
_wfopen
_wgetcwd
_wmktemp
_wpopen
fmod
fputws
isspace
isupper
mblen
memcpy
rename
strftime
strtod
tmpfile
wcsncat
wcsstr

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mfSm
Size: 3KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dijp
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c207299484f20959dddeb31113f8d2fd

Headers

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 6KB - Virtual size: 7KB

.data Size: 36KB - Virtual size: 41KB

.mfSm Size: 3KB - Virtual size: 13KB

.dijp Size: 5KB - Virtual size: 12KB

.reloc Size: 1024B - Virtual size: 2KB

.text
Size: 6KB - Virtual size: 7KB

.data
Size: 36KB - Virtual size: 41KB

.mfSm
Size: 3KB - Virtual size: 13KB

.dijp
Size: 5KB - Virtual size: 12KB

.reloc
Size: 1024B - Virtual size: 2KB