0873ea3362a64c2c17502f6d2344fdf5

General

Target

0873ea3362a64c2c17502f6d2344fdf5
Size

80KB
MD5

0873ea3362a64c2c17502f6d2344fdf5
SHA1

5483f17a5e27804dd020d901615501aedca7f8bb
SHA256

da160aff22925ed61263df3cc50a34ac46f359b3b820f4f3bb5bd92bd043855f
SHA512

f669c96367d607db58f9032c7419331a27ef27dcbe7516a76ddc8aec6c5dc4d2f7ce3c93b7db3afeecd86ab2a5943cde0d4a917366a28d71f465b67a6e192ebf
SSDEEP

1536:sqK2nsybfIQVHJL1prRhDch9d8SvWa+S1vB8XXKOIJAFlJ54AlgXPtfL81pbt590:lnnzbfIQRJL1RRhDsd80Wa+S1Z8XXBIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0873ea3362a64c2c17502f6d2344fdf5

Files

0873ea3362a64c2c17502f6d2344fdf5
.exe windows:4 windows x86 arch:x86

768012f5f11add36138ec68ecc5bff07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
ExitThread
FreeLibrary
GetProcAddress
WaitForMultipleObjects
lstrcatA
HeapAlloc
CloseHandle
GetSystemDirectoryA
LoadLibraryW
GetModuleFileNameA
GetProcessHeap
HeapFree
GetLastError
GetFileAttributesA
FindFirstFileA
LoadLibraryA
SetFileAttributesA
lstrlenA
lstrcmpA
ResetEvent
CreateThread
WaitForSingleObject
SetEvent
GetModuleHandleW
CreateEventA
CreateMutexW
MultiByteToWideChar
CreateProcessA
WriteFile
GetModuleHandleA
FindClose
FindNextFileA
CreateFileA
ReleaseMutex
lstrcpyA
SizeofResource
LoadResource
FindResourceA

user32

wsprintfA
GetForegroundWindow

gdi32

GetStockObject

advapi32

RegSetValueExA
RegNotifyChangeKeyValue
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
RegCreateKeyExA

ole32

OleInitialize
OleUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

768012f5f11add36138ec68ecc5bff07

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

shell32

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 516B

.rsrc Size: 61KB - Virtual size: 61KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 516B

.rsrc
Size: 61KB - Virtual size: 61KB