083a65068c31cd47382cce625ab31b07

General

Target

083a65068c31cd47382cce625ab31b07
Size

75KB
MD5

083a65068c31cd47382cce625ab31b07
SHA1

56f53b4bf6ae599114dd645d2ea30d629575106d
SHA256

0ca8a2728a4ad3d1155256bc383c8161459bed0e9c740099d47422fa86409f63
SHA512

1f70e65f2b73a9cdcbd7b35466114efc893e33702635c1f8d488b2848d598223431cfb322130d4d8dd7fab5739b62ab385e83eb1f0ad3641ddac96398765ccee
SSDEEP

1536:XDH5FF0laWp8UixaMY1X+rd3gZYH++MLGoWyJeAEQ4Twb7e:Xz5Fe17ic1X+pw2xyfCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
083a65068c31cd47382cce625ab31b07

Files

083a65068c31cd47382cce625ab31b07
.exe windows:5 windows x86 arch:x86

6111f7f4ca2d2cc64b7a2757be5800ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetWindowsAccountDomainSid
CryptSetProvParam
I_ScSetServiceBitsW
RegOpenKeyExW
UnregisterTraceGuids
SetNamedSecurityInfoExW
BuildTrusteeWithSidW
RegQueryValueA
ClearEventLogW

ole32

CoFreeUnusedLibraries
CoCreateObjectInContext
StgOpenStorageOnILockBytes
OleSave
SNB_UserSize
CoTaskMemFree

gdi32

IntersectClipRect
GdiPrinterThunk
GdiPrinterThunk
GdiFixUpHandle
GetRasterizerCaps

msvcrt

__unDNameEx
difftime
_wcreat
__argv
getchar
_wtoi64
_Getmonths
_spawnve
_pipe
_gcvt

user32

SetForegroundWindow
IsDialogMessage
IsWindowUnicode
DdeNameService
MapWindowPoints
User32InitializeImmEntryTable
LoadCursorFromFileA
EnumPropsA

kernel32

LockResource
SetFileTime
MoveFileA
WriteFileEx
GetPrivateProfileIntW
SetConsoleCursorPosition
GetModuleHandleA
CreateNamedPipeW
GetStartupInfoA
GetCommandLineA
FlushInstructionCache
InterlockedExchangeAdd
IsProcessorFeaturePresent
HeapDestroy
CreatePipe

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6111f7f4ca2d2cc64b7a2757be5800ca

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

gdi32

msvcrt

user32

kernel32

Sections

.text Size: 70KB - Virtual size: 70KB

.data Size: 3KB - Virtual size: 120KB

.rsrc Size: 1024B - Virtual size: 784B

.text
Size: 70KB - Virtual size: 70KB

.data
Size: 3KB - Virtual size: 120KB

.rsrc
Size: 1024B - Virtual size: 784B