05c15cc22dfbdf6a9d1227389cda6d44

Sharing

Copy URL

Twitter E-mail

General

Target

05c15cc22dfbdf6a9d1227389cda6d44
Size

24KB
MD5

05c15cc22dfbdf6a9d1227389cda6d44
SHA1

76b412651d20e2a0ac9964c3c9fe426d13cd6fc9
SHA256

e10e0047ffaaabbc4678907ffaa447b5090b52a281817796287aa1ce60fa0687
SHA512

d3ee657e6a3624cb0a1a373e04c08322b3deca49a6b769e134c39ec36768c2ec57f5b3bb9ff010f0c91706d003dd95819fa76b40d3f12b5f9e2a7276c3a618fe
SSDEEP

192:eEFbkjyVfvKUF951v0CNRIpgY3k7tEg0rbQYhAkhokh13HAfwXD4oyzUMfIJL4:NtkuTtv1p7O53phJh13HGwz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05c15cc22dfbdf6a9d1227389cda6d44

Files

05c15cc22dfbdf6a9d1227389cda6d44
.exe windows:4 windows x86 arch:x86

386c9c089db7c3b18b6f13d2f2c51dd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetModuleHandleA
Sleep
GetLastError
TerminateProcess
GetCurrentProcess
GetSystemDefaultLangID
DeleteFileA
GetVersionExA
LoadLibraryA
FreeLibrary
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
OpenProcess
GetSystemDirectoryA
CloseHandle
GetCommandLineA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
CloseServiceHandle
LookupPrivilegeValueA
OpenProcessToken
QueryServiceStatus
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges

mfc42

ord561
ord815
ord6929
ord1575
ord540
ord800
ord941
ord537
ord858
ord4277
ord5683
ord535
ord2818
ord924
ord860

msvcrt

_mbsicmp
__dllonexit
_onexit
_local_unwind2
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_except_handler3
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
__CxxFrameHandler
_exit
_adjust_fdiv

msvcp60

?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

386c9c089db7c3b18b6f13d2f2c51dd3

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

msvcp60

Sections

.text Size: 8KB - Virtual size: 5KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 8KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 160B