1ab5a9b3a92c7d971497894b3ecec5dc

General

Target

1ab5a9b3a92c7d971497894b3ecec5dc
Size

278KB
MD5

1ab5a9b3a92c7d971497894b3ecec5dc
SHA1

314e6b63329715039780aae69e8923d1e9d63787
SHA256

27d49f104717685160ea4e1dd597eaf4424a6cb3f5adc539686285ed2117df38
SHA512

314fcc93276abb5be3452499c4acedaa9d0398b039f1e0b4091bf8990a364ded180f558f10b7c19ec3114a96faad750078f798a72402a2c18d1ae145970352b4
SSDEEP

6144:MCvJoq7COG+85s5CbLWTrRInjbtMB/TsQOtyA5ytDSXh24p0:fvOq7C5p5sW6hIjbAXJAcRKhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab5a9b3a92c7d971497894b3ecec5dc

Files

1ab5a9b3a92c7d971497894b3ecec5dc
.exe windows:4 windows x86 arch:x86

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetCPInfo
GetModuleHandleA
GetStringTypeW
HeapFree
GetConsoleOutputCP
FreeLibrary
InterlockedIncrement
AddAtomA
SetUnhandledExceptionFilter
LoadLibraryW
HeapSize
GetACP
UnhandledExceptionFilter
GetFileAttributesW
GetCurrentProcess
GetSystemTimeAsFileTime
GetConsoleCP
WideCharToMultiByte
GetVersionExA
IsValidCodePage
HeapReAlloc
GetStartupInfoA
EnumResourceNamesW
BeginUpdateResourceW
UpdateResourceW
VirtualAlloc
LCMapStringW
SetFilePointer
GetProcessHeap
GetConsoleMode
LeaveCriticalSection
GetCommandLineA
HeapAlloc
GetCurrentProcessId
EnterCriticalSection
CheckNameLegalDOS8Dot3W
LCMapStringA
RtlUnwind
RaiseException
GetStringTypeA
WriteFile
GetModuleFileNameW
GetOEMCP
SetStdHandle
IsDebuggerPresent
LoadLibraryExW
InterlockedDecrement

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 146KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0312e1ce0c3a4f5543ad0aa50567804a

Headers

File Characteristics

Imports

kernel32

shell32

ole32

setupapi

Sections

.text Size: 146KB - Virtual size: 278KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 128KB - Virtual size: 128KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 278KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 128KB - Virtual size: 128KB

.rsrc
Size: 512B - Virtual size: 4KB