23a0feee7aef6641c430e314d62c3534

General

Target

23a0feee7aef6641c430e314d62c3534
Size

16KB
MD5

23a0feee7aef6641c430e314d62c3534
SHA1

4fdaae0cfa0923a600942411c76da88119247369
SHA256

5fb9ae564eb06ae9f1009f546dcc4bbf3dac791554a466bdb131c6526b965d76
SHA512

acdd641a101ca40ce081d9d7bc216f624da93277dc82002b2022f5c98714f38f1ac48ff52c3f7e61d9b055dc9f1a2a84cfb82244ee7a121c5a3cc28f3e844a10
SSDEEP

384:Av+pvlR4BZRpO9GN7cjce5tGRThi5Y1IfNWSF4ifW:Av+pvlRoXO9oWH5MRThi+IfjJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23a0feee7aef6641c430e314d62c3534

Files

23a0feee7aef6641c430e314d62c3534
.exe windows:4 windows x86 arch:x86

4abcbef9cd933c1554dbc0dd1e248c7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
SetKernelObjectSecurity
GetAce
RegDeleteKeyA
ControlService
SetTokenInformation
IsValidSid
QueryServiceConfigA
QueryServiceObjectSecurity
LookupPrivilegeValueA
MapGenericMask
RegOpenKeyExA

gdi32

GetObjectA
SetBkMode
CreatePen
CreateDIBSection
StartPage
RestoreDC
DeleteObject
SelectObject
LineTo
SetTextAlign
SelectClipRgn
GetTextMetricsA

msvcrt

_isctype
_waccess
strcspn
_itow
wcsncpy
_XcptFilter
wcsncat
sprintf
_wcsnicmp
_splitpath
strncpy
_beginthread

kernel32

GetExitCodeThread
GetStringTypeA
GetFileTime
SearchPathA
SetEndOfFile
CreateThread
ResumeThread
MultiByteToWideChar
DuplicateHandle
WaitForMultipleObjects
MapViewOfFile
CreateFileA
GetConsoleOutputCP
EnumSystemLocalesA
LocalFree
lstrcatA
GetLocaleInfoA
lstrcpyA

user32

GetDlgItem
PeekMessageA
DefDlgProcA
SendMessageTimeoutA
GetSysColor
SetWindowTextA
MessageBoxA
GetWindowTextA
EnableMenuItem
GetWindowPlacement
CreateIconIndirect

ole32

OleGetIconOfClass
CoResumeClassObjects
CoGetMalloc
CoGetTreatAsClass
CoMarshalInterThreadInterfaceInStream
CoGetStdMarshalEx
CoFreeLibrary
CoFileTimeToDosDateTime

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4abcbef9cd933c1554dbc0dd1e248c7e

Headers

File Characteristics

Imports

advapi32

gdi32

msvcrt

kernel32

user32

ole32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 960B

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 960B