067cea6df1886bfb86ca3f0a327d52fb

General

Target

067cea6df1886bfb86ca3f0a327d52fb
Size

34KB
MD5

067cea6df1886bfb86ca3f0a327d52fb
SHA1

b4ca4bf5fdeee71be85ee198e40b7d63d111fceb
SHA256

4c0930c5757012ac87a1177e34817682f7963a14acf23c486eb0dda4057339dc
SHA512

71e901a472c062a28975894a1f39818df2d1e0936ad284efc7190ffceede217625757b855872461f7cfb010bca66c6919d08608b248b23aeddf4bac274136623
SSDEEP

384:8QpmKKS+jqtF92NceQkVKF8z1zbNjCxk8voiei:lm1S+IONcf0hNj+rvtz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
067cea6df1886bfb86ca3f0a327d52fb

Files

067cea6df1886bfb86ca3f0a327d52fb
.exe windows:5 windows

a3a642d9845af66356006b2255125649

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

rasapi32

DDMGetPhonebookInfo

glu32

gluBeginCurve
gluBeginPolygon
gluBeginSurface
gluBeginTrim
gluBuild1DMipmaps
gluBuild2DMipmaps
gluCylinder
gluDeleteNurbsRenderer
gluDeleteQuadric
gluDeleteTess
gluDisk
gluEndCurve
gluEndPolygon
gluEndSurface
gluEndTrim
gluErrorString
gluErrorUnicodeStringEXT
gluGetNurbsProperty
gluGetString
gluGetTessProperty
gluLoadSamplingMatrices
gluLookAt
gluNewNurbsRenderer
gluNewQuadric
gluNewTess
gluNextContour
gluNurbsCallback
gluNurbsCurve
gluNurbsProperty
gluNurbsSurface
gluOrtho2D

kernel32

MapViewOfFileEx
GetACP
GetSystemDirectoryA
LocalFree
SetConsoleTitleW
EnumCalendarInfoW
GetFileSize
ReadFile
CreateFileA

msdtcprx

DTC_XaOpen
DTC_XaPrepare
DTC_XaRollback

adsldpc

ADSIFreeColumn
ADSIGetColumn
ADSIGetFirstRow
ADSIGetNextColumnName
ADSIGetNextRow
ADSIGetObjectAttributes
ADSIGetPreviousRow
ADSIModifyRdn

msrating

RatingCustomInit

mtxclu

MtxCluIsClusterPresent

samlib

SamAddMemberToAlias

Sections

.text
Size: 2KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a3a642d9845af66356006b2255125649

Headers

File Characteristics

Imports

rasapi32

glu32

kernel32

msdtcprx

adsldpc

msrating

mtxclu

samlib

Sections

.text Size: 2KB - Virtual size: 32KB

DATA Size: 7KB - Virtual size: 18KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 2KB - Virtual size: 32KB

DATA
Size: 7KB - Virtual size: 18KB

.rsrc
Size: 22KB - Virtual size: 22KB