0934a849bb2e61bef5e1ff21a2b9e89f

Sharing

Copy URL Twitter E-mail

General

Target

0934a849bb2e61bef5e1ff21a2b9e89f
Size

788KB
MD5

0934a849bb2e61bef5e1ff21a2b9e89f
SHA1

279544bfae2b95a4b84c47cef26204d46fa71bc6
SHA256

106e50de9767ea8eb26b0d8419c9cba546dad0343c69d5ace81c6908be267929
SHA512

0570e328bfbc9e427944e7addc8f0a9e79693c1112edb726dfc04cbbe746bc7be2a7acb888f76f719379374742ab340781f72c1c0f7c607cd2e0d82e3e138b85
SSDEEP

12288:Dc3sXMFFR0C/16QUXNTteMnmWWO5adnFRRNaEUhdIl5IBdYgl1/IdNRsXx/C7LJk:DCnL6QU9IMspFfs7vhH/DxK7jBbvQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0934a849bb2e61bef5e1ff21a2b9e89f

Files

0934a849bb2e61bef5e1ff21a2b9e89f
.exe windows:5 windows x86 arch:x86

152601b957faf88ea0fc72ae26e7c51a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
Sleep
GetFileSize
CloseHandle
UnmapViewOfFile
CreateMutexA
OpenMutexA
CreateEventA
LoadLibraryA
GetModuleHandleA
InterlockedDecrement
GetProcAddress
VirtualFree
GetLastError
GetModuleHandleExW
IsBadReadPtr
GetEnvironmentVariableW
GetCurrentDirectoryW
GetFullPathNameW
GetFileAttributesExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
SetLastError
WriteFile
DeleteFileA
HeapReAlloc
OpenProcess
GetCurrentProcess
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
GetProcessId
DuplicateHandle
GetLocalTime
SystemTimeToFileTime
GetTickCount
CreateProcessW
GetTempPathA
GetTempFileNameA
MoveFileExA
AddVectoredExceptionHandler
GetCurrentProcessId
GetCurrentThread
GetThreadContext
FindClose
GetCurrentDirectoryA
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
WriteConsoleW
FlushFileBuffers
SetStdHandle
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
InterlockedCompareExchange
InterlockedIncrement
GetStringTypeW
GetConsoleCP
RaiseException
RtlUnwind
GetCurrentThreadId
LoadLibraryExW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
HeapSize
IsDebuggerPresent
VirtualQuery
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetConsoleMode
SetFilePointerEx
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
LCMapStringW

user32

IsDialogMessageA
MessageBoxA
DialogBoxParamA
SetDlgItemInt

advapi32

RegOpenKeyExA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA

shell32

ShellExecuteExW

oleaut32

SysFreeString
SysAllocString

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

152601b957faf88ea0fc72ae26e7c51a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

oleaut32

Sections

.text Size: 165KB - Virtual size: 164KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 7KB - Virtual size: 6KB

.text
Size: 165KB - Virtual size: 164KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 7KB - Virtual size: 6KB