243e2e0d57e4e6099cdb0c486ee03bd7

Sharing

Copy URL Twitter E-mail

General

Target

243e2e0d57e4e6099cdb0c486ee03bd7
Size

150KB
MD5

243e2e0d57e4e6099cdb0c486ee03bd7
SHA1

98e195f64bdef523d7833a493ad23eef42306f8b
SHA256

eafc49fac6bc381eb68818290f7f8473d2f356b038fbf50595eb2ea1d6b91654
SHA512

5ded15d11fa992ef0f67a388debd6761817e7c28fd4bb9fc5cd8a36dbc2612f528b4df813750c1157b1d5cca519c978a081336d5e43de91c1daa5c11f4537fb8
SSDEEP

3072:Fs7c2VFa1bHk8vdIYJxgqLWcUJlx+SPeOQbj6uOTEDqYO/aamofo63:G7c8kzBvdIoxLW1mSsbbOT5/aamDq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
243e2e0d57e4e6099cdb0c486ee03bd7

Files

243e2e0d57e4e6099cdb0c486ee03bd7
.exe windows:4 windows x86 arch:x86

3ee621f86bd119700d7aa12cba17936b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_amsg_exit
_ftol
_commit
_isatty
wcschr
srand
_rotl
_write
_vsnprintf
_access
_rotr
__p__iob
_CIacos
tolower
__p__osver
malloc
fread
ctime

user32

IsIconic
ExitWindowsEx
CheckRadioButton
InvalidateRect
CharLowerW
SetFocus
EqualRect
DialogBoxParamW
GetWindow
PostQuitMessage
SetWindowLongW
GetWindowTextW
GetWindowTextLengthW
DrawTextW
PostMessageW
GetWindowLongW
CallNextHookEx
GetFocus
GetClassNameW
SetWindowTextA
GetDlgItemTextW
EnumChildWindows
CharNextA
EnableMenuItem
SendDlgItemMessageW
GetParent
GetClassNameA
CallWindowProcW

kernel32

GetFileSize
ExpandEnvironmentStringsW
GetVersionExA
IsBadReadPtr
GetEnvironmentStringsW
SetFileAttributesA
ResetEvent
FileTimeToLocalFileTime
IsBadWritePtr
CreateDirectoryW
VirtualAlloc
InitializeCriticalSection
WaitForMultipleObjects
GetCommandLineA
GetWindowsDirectoryW
GetModuleHandleW
GetVersionExW
GlobalUnlock
GetVersion
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
lstrcmpiA
lstrcatW
GetTickCount
GetConsoleMode
CompareStringA
HeapReAlloc
GetFileAttributesA
GetProcessHeap
VirtualQuery
FindFirstFileW
FindNextFileA
DeleteFileW
FindResourceA
CreateProcessW
UnhandledExceptionFilter
CreateFileMappingW
OutputDebugStringA
DeleteCriticalSection
LoadLibraryExW
MapViewOfFile
WriteConsoleW
LockResource
GetLastError
FindNextFileW
ExitProcess

advapi32

GetSecurityDescriptorLength
AdjustTokenPrivileges
GetSecurityDescriptorOwner
RegSetValueExA
QueryServiceStatus
MakeSelfRelativeSD
GetSecurityDescriptorDacl
SetServiceStatus
GetAclInformation
GetTraceEnableLevel
CryptAcquireContextA
RegQueryValueA
RegEnumValueW
IsValidSecurityDescriptor
RegCreateKeyA
InitializeSecurityDescriptor
GetSidSubAuthorityCount
RegEnumKeyExW
GetSecurityDescriptorControl
RegQueryValueExW
RegOpenKeyA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
RegQueryValueW
CryptGenRandom
AddAce
OpenSCManagerW
GetUserNameW
QueryServiceConfigW
RegQueryInfoKeyW
GetTraceEnableFlags
CryptCreateHash
DuplicateTokenEx
StartServiceW
UnlockServiceDatabase
LsaQueryInformationPolicy
LsaClose

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.textbss
Size: 512B - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ee621f86bd119700d7aa12cba17936b

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

kernel32

advapi32

Sections

.text Size: 136KB - Virtual size: 135KB

.tls Size: 512B - Virtual size: 137B

.textbss Size: 512B - Virtual size: 126KB

BSS Size: 512B - Virtual size: 76B

.bss Size: 512B - Virtual size: 109B

.bss Size: 512B - Virtual size: 97B

.tls Size: 512B - Virtual size: 37KB

.tls Size: 512B - Virtual size: 77B

.rsrc Size: 9KB - Virtual size: 9KB

.text
Size: 136KB - Virtual size: 135KB

.tls
Size: 512B - Virtual size: 137B

.textbss
Size: 512B - Virtual size: 126KB

BSS
Size: 512B - Virtual size: 76B

.bss
Size: 512B - Virtual size: 109B

.bss
Size: 512B - Virtual size: 97B

.tls
Size: 512B - Virtual size: 37KB

.tls
Size: 512B - Virtual size: 77B

.rsrc
Size: 9KB - Virtual size: 9KB