2a824d031c61ec4fafa995533fc280d5

General

Target

2a824d031c61ec4fafa995533fc280d5
Size

96KB
MD5

2a824d031c61ec4fafa995533fc280d5
SHA1

78a90ecfa73e96f8ae83e261949833f46b1c7a45
SHA256

c4b2df5ff3dbfa86b404bda8c5f88b2d69d35aa89f58484d3095bc47db890340
SHA512

0f7f6586de20e4ceb68d0358f1e0bdc295da93cea0e5c264502dffad7d31dac581c3bfcff585705cd17e93c22e8ef51dcdc1b9ae37bbc8d9bf1f23ec248c23cb
SSDEEP

1536:WknmURf92WJ5c2YaIj0KjblJrIWTYd3N9T4iQmepBxZEoUKK15Y:FmURf92WJzY/j3MWgjYxZEoUKKbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a824d031c61ec4fafa995533fc280d5

Files

2a824d031c61ec4fafa995533fc280d5
.exe windows:4 windows x86 arch:x86

804818865563d521f8a263b6541496f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetPrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
GetTickCount
HeapFree
SetLastError
Sleep
lstrcpyA
GetSystemDirectoryA
lstrlenA
lstrcatA
FindResourceA
LoadResource
FreeResource
CreateFileA
WriteFile
CloseHandle
SizeofResource
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress

user32

GetMessageA
PostThreadMessageA
GetInputState
wsprintfA

advapi32

GetAce
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
DeleteService
ControlService
GetUserNameA
QueryServiceStatus
RegQueryValueExA

shlwapi

SHDeleteKeyA

netapi32

NetApiBufferFree
NetUserGetLocalGroups

msvcrt

_stricmp
srand
rand
strchr
memcpy
memset
_except_handler3
strlen

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

804818865563d521f8a263b6541496f8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

netapi32

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 968B

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 968B

.rsrc
Size: 88KB - Virtual size: 88KB