10039051a7ce4e6859b29c5f3e93cdbd

General

Target

10039051a7ce4e6859b29c5f3e93cdbd
Size

23KB
MD5

10039051a7ce4e6859b29c5f3e93cdbd
SHA1

7fc75d28ba500c9bcfec10914ddc24045abdf1c5
SHA256

6e66fc534fa0f7ef00c1bdf4ee95e5698235e59825e92693c5e93f77f28e1f7b
SHA512

326d95da1e2f5ed4aedf01ab5780b44c62b92806a378579db7a1073acc36f46d052dd48a3fec667a810defdd4a2f7b30da5dcf05d4e0b017ec70baddbf5c680e
SSDEEP

384:f5Pc73ffHSn4I2S9tLSntdXE8jOX2GcsAH6pMhBlrXV5MF45UnJxTt:f5U3fKn4I2EtLSTUe96pCBxXrMFjnXTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10039051a7ce4e6859b29c5f3e93cdbd

Files

10039051a7ce4e6859b29c5f3e93cdbd
.dll windows:4 windows x86 arch:x86

5c6a2e577a935e67799c9f6fd817538c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetVersionExA
ExitThread
TerminateThread
WaitForMultipleObjects
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
ReadFile
CreateMailslotA
WaitForSingleObject
lstrcatA
CreateThread
GetSystemDirectoryA
CreateDirectoryA
DeleteFileA
GetTickCount
GetTempFileNameA
GetFileAttributesA
lstrlenA
HeapFree
OpenProcess
GetProcessHeap
lstrcmpiA
SetFilePointer
CreateMutexA
ReleaseMutex
SetEndOfFile
CreateEventA
lstrcmpA
ResetEvent
CompareStringA
CompareStringW
lstrlenW
lstrcpyA
HeapAlloc
HeapReAlloc
CreateFileA
WriteFile
CloseHandle
SetEvent

user32

wsprintfA

advapi32

RegNotifyChangeKeyValue
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
CryptAcquireContextA
CryptDecrypt
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExA
OpenProcessToken
CreateProcessAsUserA
RegQueryValueExA
RegCreateKeyExA
CryptHashData

wininet

InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetOpenA
InternetGetConnectedState
InternetCloseHandle

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c6a2e577a935e67799c9f6fd817538c

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB