240b48d6e583ef294df0838fe126c469

General

Target

240b48d6e583ef294df0838fe126c469
Size

169KB
MD5

240b48d6e583ef294df0838fe126c469
SHA1

38c1b14dd27d6127c34f3219e55a9d79db57d688
SHA256

e2c193df2d5e7eff25fe7cae90e96901b20233b8991c3aa33bc6440ff8a7097f
SHA512

15263abfcb1a63f0e2d27e7f00471ad4e38032357710ae9fd32b50f2f64d1ef6daa15b3beddc1c52c7b8237a0a3f4d8c68247562c70744f37d0714c3f40aaeae
SSDEEP

3072:IK+5h1sbgQwaIAzEwXU6rOL9S582Ymd8JZ/89VQCcCZinF0O/T0VbqJI:hYm3ywEIE9wsX/cXZZoTgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
240b48d6e583ef294df0838fe126c469

Files

240b48d6e583ef294df0838fe126c469
.exe windows:4 windows x86 arch:x86

2f1dd3871cde0ade05d9ae9134d3063d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

kernel32

GetTempFileNameA
DeviceIoControl
Sleep
GetTickCount
CopyFileA
GetCurrentProcessId
AddAtomW
DisableThreadLibraryCalls
WaitForSingleObject
CreateFileA
GetSystemTimeAsFileTime
GlobalUnlock
QueryPerformanceCounter
SetFilePointer
GetFileSize
GlobalFree
InterlockedIncrement
GetLastError
MultiByteToWideChar
SetFileAttributesA
EnumResourceNamesA
VirtualAlloc
CreateMutexA
GetVolumeInformationA
GetModuleFileNameA
CloseHandle
ReleaseMutex
LocalAlloc
GetSystemTime
WideCharToMultiByte
CreateFileW
DeleteFileA
WriteFileGather
DeleteCriticalSection
CreateDirectoryA
GetModuleFileNameW
LocalFree
VirtualFree
ReadFile
InterlockedDecrement
GlobalLock
GetFileAttributesA
GetTempPathA
GetVersionExA
InitializeCriticalSection
GetCurrentThreadId
lstrlenA
FreeLibrary

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f1dd3871cde0ade05d9ae9134d3063d

Headers

File Characteristics

Imports

advapi32

lz32

kernel32

setupapi

Sections

.text Size: 92KB - Virtual size: 484KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 73KB - Virtual size: 72KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 484KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 73KB - Virtual size: 72KB

.rsrc
Size: 512B - Virtual size: 4KB