1a2c902232e95d8908106bb6e228b0a5

General

Target

1a2c902232e95d8908106bb6e228b0a5
Size

14KB
MD5

1a2c902232e95d8908106bb6e228b0a5
SHA1

d0bef2655dd27c96deb0e160fb14f8758fd777f5
SHA256

936436218791b732a42a302e532004ab5c29740e802b966733bbf48b42a4ea74
SHA512

432c440d6f3264e351c80cb41efca7b98a425c94457255c92c1edf99ef445e6c866fb02e26c076b1bb282a07e12563d8c3412fb481d6b2715e90797a4e32c708
SSDEEP

192:TPE1XgDA1VvjKDWngLgDP1oynfLjwGEo00CmHwgm7uMOSzFXyt:OXjzj7ngsL1BjwaljQFuMdzFXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a2c902232e95d8908106bb6e228b0a5

Files

1a2c902232e95d8908106bb6e228b0a5
.exe windows:4 windows x86 arch:x86

45a33d76517d165f67ff91468bc13521

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
CopyFileA
GetProcAddress
LoadLibraryA
Sleep
DeleteFileA
WaitForSingleObject
TerminateProcess
OpenProcess
GetCommandLineA
CreateThread
GetModuleFileNameA
WinExec
GetSystemDirectoryA
LockResource
LoadResource
SizeofResource
FindResourceA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetWindowsDirectoryA

user32

FindWindowExA
FindWindowA
SendMessageA

advapi32

LookupPrivilegeValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges

winmm

mixerSetControlDetails
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
strlen
sprintf
strncpy
sscanf
strchr
strrchr
memset
fclose
fwrite
fopen
_stricmp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45a33d76517d165f67ff91468bc13521

Headers

File Characteristics

Imports

kernel32

user32

advapi32

winmm

msvcrt

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 556B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 556B

.rsrc
Size: 8KB - Virtual size: 8KB