1556114ae5d666dbd078178d55b3f8aa

Sharing

Copy URL

Twitter E-mail

General

Target

1556114ae5d666dbd078178d55b3f8aa
Size

141KB
MD5

1556114ae5d666dbd078178d55b3f8aa
SHA1

5dc91107785d80241ed750c8ca4c7474d2ba05bd
SHA256

40094f40c86eb060ed3d9530fb74b2b248a47a51ad7848223995cbaa0d1e13f2
SHA512

52126e6219f8ca5e44febaaf1e24a8258d5aa6559e40d95eddc53044c0695c8d6c66dc725ea11e317666a5e8ce0ceebd47ba99731d3755a2dd152dc6c285dc7a
SSDEEP

3072:W5yJGaBDcKFP/QCtxydMKNWUWFisaGJC:W59aBwC/QrAfaGw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

1556114ae5d666dbd078178d55b3f8aa

resource
1556114ae5d666dbd078178d55b3f8aa

Files

1556114ae5d666dbd078178d55b3f8aa
.exe windows:4 windows x86 arch:x86

fd13a0b1442083ef8dd5bdba75a1ea04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CreateEventA
CreateProcessA
DeleteCriticalSection
DeleteFileA
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToLocalFileTime
FormatMessageA
FreeLibrary
GetConsoleCP
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetEnvironmentStringsA
GetExitCodeProcess
GetModuleFileNameA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetThreadLocale
GetVersion
GlobalAlloc
GlobalFree
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InterlockedExchange
InterlockedIncrement
IsBadWritePtr
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalFree
Module32Next
OpenEventA
OpenProcess
QueryPerformanceCounter
ReadFile
ReleaseMutex
SetEnvironmentVariableA
SetEvent
SetPriorityClass
SizeofResource
Sleep
UnhandledExceptionFilter
UnmapViewOfFile
VirtualFree
WideCharToMultiByte
WriteConsoleA
lstrcmpA
lstrlenA

user32

CreateWindowExA
DrawFocusRect
EndDialog
GetDesktopWindow
IsRectEmpty
LoadStringA
SetRect
SetTimer
TranslateMessage

advapi32

CloseServiceHandle
ControlService
EqualSid
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegQueryInfoKeyA
RegisterServiceCtrlHandlerA
StartServiceA

Sections

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 37KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd13a0b1442083ef8dd5bdba75a1ea04

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 90KB - Virtual size: 92KB

.DATA Size: 37KB - Virtual size: 172KB

.data Size: 6KB - Virtual size: 8KB

.idata Size: 2KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 90KB - Virtual size: 92KB

.DATA
Size: 37KB - Virtual size: 172KB

.data
Size: 6KB - Virtual size: 8KB

.idata
Size: 2KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 3KB - Virtual size: 2KB