2739890fed4ac47318c098f3fbcc7b7d

Sharing

Copy URL Twitter E-mail

General

Target

2739890fed4ac47318c098f3fbcc7b7d
Size

186KB
MD5

2739890fed4ac47318c098f3fbcc7b7d
SHA1

448467cc24cf4da4281abf4907b82aa9f1fa238b
SHA256

5a31e7cc3ee8170530b378e3f35f6ae32cc0ddd31a5bf79d0cf915f35f639d51
SHA512

e80335df8f53a72774ecac81ca7dd1d0b2c5d9cd6846816778baa7ebebc405e54244987aa1f527c0ddf232be34d8941a0c4a65d09cfdc21dba26fd3076af2fb6
SSDEEP

3072:LIrXIFte6iBElpJ5jVawCWV4cyqcEnA6g+YJVuW83WdbgJ7qkT3hijVah:LMiKBQ1awCWV4+cEhJYJhdsBqOh7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2739890fed4ac47318c098f3fbcc7b7d

Files

2739890fed4ac47318c098f3fbcc7b7d
.exe windows:5 windows x86 arch:x86

4f4e1366428798649bb6dc0253d83559

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
EnableWindow
SetWindowLongW
GetDlgItem
ShowWindow
SetWindowTextW
DialogBoxParamW
SendMessageW
LoadStringW
IsWindowEnabled
GetWindowTextW
GetWindowLongW
GetParent

advapi32

CloseServiceHandle
StartServiceW
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CreateServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ChangeServiceConfigW
ControlService

kernel32

UnhandledExceptionFilter
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
TerminateProcess
VirtualProtect
lstrcmpiW
lstrcpynW
lstrlenW
VirtualFree
CloseHandle
CompareStringW
CreateFileW
DeviceIoControl
DisableThreadLibraryCalls
ExitProcess
GetComputerNameW
GetCurrentProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
SetLastError
GetProcAddress

msvcrt

wcscmp
_vsnwprintf
_except_handler3

shell32

ShellExecuteW
SHExtractIconsW

gdi32

GetAspectRatioFilterEx
CloseEnhMetaFile

setupapi

CMP_UnregisterNotification
CM_Create_Range_List
SetupCloseLog
SetupDiCreateDevRegKeyW
SetupDiGetClassInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiInstallDevice
SetupDiOpenDevRegKey
SetupDiSetClassInstallParamsW
SetupLogErrorW
SetupOpenLog

Exports

Exports

AGetVolume
DupCursor
GetObjectInfo
HrGetStreamSize
ProcessBatch2
SetIndexRange

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f4e1366428798649bb6dc0253d83559

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

shell32

gdi32

setupapi

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 40KB - Virtual size: 43KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 40KB - Virtual size: 43KB

.rsrc
Size: 5KB - Virtual size: 5KB