087ed06ded9da0d928d47044e7adc33b

Sharing

Copy URL Twitter E-mail

General

Target

087ed06ded9da0d928d47044e7adc33b
Size

173KB
MD5

087ed06ded9da0d928d47044e7adc33b
SHA1

4d3b0ea7fd4ffad40e8fddad7ca16b4beaa02881
SHA256

84f4dd5d0892d3ca4ab114f0d19166ee5bea5c20a75f6d6a0eef1b25e76ddf4c
SHA512

42b71020d022bb0940bd8302449966c07235bcefffaf2d090dd534c9fd09150c76b94d6d61d3f9e15cb1374adb96f7da66a98cc14665178132fffeb3cdd51319
SSDEEP

3072:HJsNVGuX1aKzD26loiZtFFc3PHurpWuB/LEvLbjmOTAw4ofolxDS:psNV1XQ4VprYAjEXjmO0wzl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
087ed06ded9da0d928d47044e7adc33b

Files

087ed06ded9da0d928d47044e7adc33b
.exe windows:5 windows x86 arch:x86

44d1e61f3a7a605225cdf10e62ed32ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

apphelp

SetPermLayers

dsprop

ADsPropShowErrorDialog
ADsPropCreateNotifyObj
ADsPropSendErrorMessage
ADsPropSetHwnd
FindSheet
ADsPropGetInitInfo
ADsPropSetHwndWithTitle

shlwapi

PathIsUNCServerShareW
PathAppendW

ole32

CoGetInterfaceAndReleaseStream
StringFromIID
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoCreateInstance
CoGetApartmentID
ReleaseStgMedium
StringFromCLSID

ntdll

RtlIdentifierAuthoritySid
RtlInitUnicodeString
RtlSubAuthorityCountSid
NtQuerySystemTime
RtlSubAuthoritySid
RtlNtStatusToDosError

shell32

SHGetFolderPathW

dnsapi

DnsNameCompareEx_W

user32

ReleaseDC
RegisterClipboardFormatW
GetDlgItem
ShowWindow
wsprintfW
DrawFocusRect
IsDlgButtonChecked
GetWindowTextW
GetWindowThreadProcessId
DialogBoxParamW
RegisterWindowMessageW
CallWindowProcW
SetDlgItemTextW
CreateWindowExW
SetWindowTextW
MessageBoxA
FrameRect
SetWindowPos
DestroyWindow
LoadIconW
CheckRadioButton
InflateRect
GetWindowLongW
DefWindowProcW
DrawIcon
GetClientRect
MapDialogRect
GetWindow
SetScrollRange
GetDlgCtrlID
SystemParametersInfoW
GetDesktopWindow
LoadBitmapW
DestroyIcon
GetWindowTextLengthW
GetSystemMetrics
SetScrollInfo
MessageBoxW
UpdateWindow
SetWindowContextHelpId
FindWindowExW
GetParent
OffsetRect
LoadStringW
GetScrollInfo
EndDialog
MoveWindow
SendDlgItemMessageW
SendMessageW
EndPaint
RegisterClassW
GetDC
PostMessageW
GetSysColor
EnableWindow
MessageBeep
MapWindowPoints
WinHelpW
SetScrollPos
GetDlgItemTextW
IsWindowEnabled
ScreenToClient
GetSysColorBrush
SetFocus
IsWindow
SetForegroundWindow
GetWindowRect
BeginPaint
SetCursor
SetWindowLongW
ScrollWindow
LoadCursorW
CheckDlgButton

kernel32

GetLastError
VirtualAlloc

gdi32

GetDeviceCaps
SetTextColor
CreatePatternBrush
CreateFontIndirectW
DeleteObject
CreateBitmap
SetBkColor
GetTextExtentPoint32W

ntdsapi

DsFreeNameResultW
DsCrackNamesW
DsBindW
DsUnBindW
DsIsMangledDnW
DsCrackSpn3W

version

GetFileVersionInfoW

cryptui

CryptUIDlgViewCertificateW
CryptUIDlgSelectCertificateW

credui

CredUIParseUserNameW
CredUIInitControls

crypt32

CertGetEnhancedKeyUsage
CertSaveStore
CertDuplicateStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertEnumSystemStore
CertGetNameStringW
CryptDecodeObject
CryptQueryObject
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertDeleteCertificateFromStore
CertOpenStore
CertControlStore
CertFreeCertificateContext
CertCloseStore
CryptFindOIDInfo

advapi32

LsaRetrievePrivateData
GetSidSubAuthority
RegCloseKey
LsaOpenTrustedDomainByName
MakeSelfRelativeSD
SystemFunction040
SetEntriesInAclW
LsaNtStatusToWinError
EqualPrefixSid
IsValidSid
SetNamedSecurityInfoW
InitializeAcl
LsaCreateTrustedDomainEx
InitializeSecurityDescriptor
RevertToSelf
LsaQueryTrustedDomainInfo
SystemFunction041
RegDeleteKeyW
LsaClose
LsaDelete
FreeSid
QueryServiceStatus
LsaQueryForestTrustInformation
CryptAcquireContextW
CloseServiceHandle
CryptGenRandom
LsaOpenTrustedDomain
RegSetValueExW
GetSecurityDescriptorDacl
RegCreateKeyExW
LsaSetForestTrustInformation
CryptReleaseContext
LsaSetTrustedDomainInfoByName
GetLengthSid
LsaQueryInformationPolicy
GetSecurityDescriptorLength
GetSidLengthRequired
GetSidSubAuthorityCount
LsaFreeMemory
GetNamedSecurityInfoW
GetSecurityDescriptorControl
RegQueryValueExW
OpenSCManagerW
BuildTrusteeWithSidW
LsaLookupSids
BuildTrusteeWithObjectsAndSidW
ImpersonateAnonymousToken
LsaOpenPolicy
RegOpenKeyExW
LsaQueryTrustedDomainInfoByName
LogonUserW
ImpersonateLoggedOnUser
EqualSid
GetExplicitEntriesFromAclW
OpenServiceW
GetSidIdentifierAuthority
AllocateAndInitializeSid

Sections

.text
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

44d1e61f3a7a605225cdf10e62ed32ad

Headers

DLL Characteristics

File Characteristics

Imports

apphelp

dsprop

shlwapi

ole32

ntdll

shell32

dnsapi

user32

kernel32

gdi32

ntdsapi

version

cryptui

credui

crypt32

advapi32

Sections

.text Size: 512B - Virtual size: 404B

.rsrc Size: 78KB - Virtual size: 78KB

.idata Size: 6KB - Virtual size: 5KB

.rdata Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 28B

.data Size: 75KB - Virtual size: 848KB

.text
Size: 512B - Virtual size: 404B

.rsrc
Size: 78KB - Virtual size: 78KB

.idata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 28B

.data
Size: 75KB - Virtual size: 848KB