04ee233d2b8cd5113144abdc537ebc7c

Sharing

Copy URL

Twitter E-mail

General

Target

04ee233d2b8cd5113144abdc537ebc7c
Size

152KB
MD5

04ee233d2b8cd5113144abdc537ebc7c
SHA1

17cdff63e392e2a0acf2931cdaa0cb581a4321e5
SHA256

b6840e87d0f1f5c6c7a20bdbfa6f6fd014332c949964431b7ad362f1e2f8520b
SHA512

5562896d7ba3a522c1420ec7395225221c7c5e23913ada726a152972bc2ff3892916cf81756d944e7e404491b575c3742a08f855b3fb294eb5d8dc69f244b5af
SSDEEP

3072:7wa5h34RXPlxHM/SkzioSRxhEqVJApCzdVOdesl9thm:kwho1HM/OFeqC4kdesF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ee233d2b8cd5113144abdc537ebc7c

Files

04ee233d2b8cd5113144abdc537ebc7c
.exe windows:5 windows x86 arch:x86

52bfe6feacea1de038bb662cb421af14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

TreeResetNamedSecurityInfoW
OpenServiceA
LsaRemoveAccountRights
WmiCloseBlock
GetSecurityDescriptorSacl
LookupPrivilegeValueW
LsaCreateAccount
GetSidSubAuthority
RegNotifyChangeKeyValue
RegisterServiceCtrlHandlerA
RegSetKeySecurity
RegSaveKeyW
RegCreateKeyExW
ConvertStringSidToSidA
GetCurrentHwProfileA
RegQueryInfoKeyA
RegCloseKey
RegQueryValueExW
OpenProcessToken
RegSetValueExA
RegQueryValueExA
GetTokenInformation
CryptHashSessionKey
AreAnyAccessesGranted
GetFileSecurityW
SystemFunction020
LsaNtStatusToWinError
LsaEnumerateTrustedDomains
SetSecurityInfo
RegisterServiceCtrlHandlerExA
GetCurrentHwProfileW
RegQueryMultipleValuesW
LsaLookupPrivilegeDisplayName
SetNamedSecurityInfoA
GetSidSubAuthorityCount
DuplicateToken
SetKernelObjectSecurity
GetSidLengthRequired
SystemFunction031
RevertToSelf
WmiOpenBlock
ObjectCloseAuditAlarmA
CreatePrivateObjectSecurityEx
SetEntriesInAclW
DecryptFileW
RegReplaceKeyA
EnumServicesStatusExW
PrivilegeCheck
AddAuditAccessAce
RegOpenCurrentUser
AddAccessDeniedAceEx
WriteEncryptedFileRaw

kernel32

CreateDirectoryExW
GetFullPathNameA
GetNumberOfConsoleInputEvents
OpenSemaphoreA
EnumSystemCodePagesW
GetDefaultCommConfigW
SetVolumeMountPointA
VirtualAlloc
GetNumberFormatA
SetConsoleOutputCP
SetConsoleOS2OemFormat
SignalObjectAndWait
CreateToolhelp32Snapshot
CreateFileW
LockResource
WriteConsoleOutputCharacterW
WritePrivateProfileStructW
GetVolumeNameForVolumeMountPointA
CreateDirectoryExA
GetConsoleAliasExesLengthW
lstrlenA
GetUserDefaultLCID
BindIoCompletionCallback
GetPrivateProfileStringA
GetFileAttributesExA
GetLastError
SetStdHandle
VirtualUnlock
GetSystemTime
OpenSemaphoreW
GetProcessHeaps
GetConsoleCP
FlushConsoleInputBuffer
GetPrivateProfileStructA
SetThreadAffinityMask
GetFileType
Module32Next
GetDevicePowerState
GetCompressedFileSizeW
GlobalWire
EnumCalendarInfoExA

gdi32

ExtCreateRegion
GdiInitSpool
TextOutW
SetWorldTransform
CreatePen
EnumFontsA
AddFontResourceExA
SetBrushOrgEx
ExtTextOutA
DeleteDC
CreateBitmap
EngPlgBlt
GdiGradientFill
GetSystemPaletteUse
CombineTransform
Arc
STROBJ_bGetAdvanceWidths
CreateHalftonePalette
GetPixelFormat
GetTextExtentExPointA
ExcludeClipRect
FixBrushOrgEx
GdiAddGlsBounds
PolyTextOutW
GetPolyFillMode
GetCharacterPlacementW
GetObjectType
GdiEntry13
SelectObject
GetBrushOrgEx
RectInRegion
GdiConvertAndCheckDC
SetLayout
CreateColorSpaceW
Chord
GetGraphicsMode
GetTextCharacterExtra
GetWorldTransform
ExtFloodFill
PlayEnhMetaFile
GetDCBrushColor
GetICMProfileW
LineTo
SetWindowExtEx
EngGradientFill
EngTransparentBlt
GetMetaFileA
BRUSHOBJ_hGetColorTransform
SetColorAdjustment
FloodFill
GetBitmapBits

secur32

MakeSignature
InitializeSecurityContextA
ImpersonateSecurityContext
QuerySecurityPackageInfoW
InitSecurityInterfaceW
QueryContextAttributesW
AcquireCredentialsHandleA
GetComputerObjectNameW
TranslateNameW
GetUserNameExA
DecryptMessage
DeleteSecurityContext
LsaGetLogonSessionData
FreeContextBuffer
InitializeSecurityContextW
EncryptMessage
AcceptSecurityContext
QuerySecurityPackageInfoA
FreeCredentialsHandle
SecpTranslateNameEx
LsaDeregisterLogonProcess
LsaEnumerateLogonSessions
LsaUnregisterPolicyChangeNotification
LsaLogonUser
LsaRegisterPolicyChangeNotification
LsaLookupAuthenticationPackage
RevertSecurityContext
AcquireCredentialsHandleW

Sections

CRT
Size: 115KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52bfe6feacea1de038bb662cb421af14

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

secur32

Sections

CRT Size: 115KB - Virtual size: 248KB

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 32KB - Virtual size: 31KB

.reloc Size: 512B - Virtual size: 158B

CRT
Size: 115KB - Virtual size: 248KB

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 32KB - Virtual size: 31KB

.reloc
Size: 512B - Virtual size: 158B