2af298e23698389e4138b2014f3bd95b

General

Target

2af298e23698389e4138b2014f3bd95b
Size

108KB
MD5

2af298e23698389e4138b2014f3bd95b
SHA1

2d8b86afa036d434db159f73d41358d73716db49
SHA256

312f2159d310eb3f00b5ec0c3667c48223ba62d1c7128dd8eb301fa1a5c5f778
SHA512

a5433004608bc987a2469fff2fb3874396af45d6abf9e9840bcb0273dadcf1e43012981cf2dceff24086a3384c7781c6e2284b35e51863fd16bd3bab2cd13aa3
SSDEEP

1536:1Sn59TIEURhlvUsWqQqofTON0RD/txMTHtpFXFRhEo4DTzSZxHpejM:AdURhlvUZhqofyeDPAF7Eo4DTOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af298e23698389e4138b2014f3bd95b

Files

2af298e23698389e4138b2014f3bd95b
.exe windows:4 windows x86 arch:x86

5ec3650e47b703135c289e60825baada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
Sleep
lstrcatA
FindResourceA
HeapFree
LoadResource
GetSystemDirectoryA
CreateFileA
SizeofResource
WriteFile
CloseHandle
FreeResource
SetLastError
lstrlenA
lstrcpyA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress

user32

wsprintfA
GetMessageA
PostThreadMessageA
GetInputState

advapi32

GetAclInformation
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
DeleteService
ControlService
GetUserNameA
QueryServiceStatus
CreateServiceA

shlwapi

SHDeleteKeyA

netapi32

NetUserGetLocalGroups
NetApiBufferFree

msvcrt

memcpy
??1type_info@@UAE@XZ
??3@YAXPAX@Z
srand
rand
fopen
_CxxThrowException
__CxxFrameHandler
memset
_except_handler3
strlen
_stricmp
strchr

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ec3650e47b703135c289e60825baada

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

netapi32

msvcrt

Sections

.text Size: 7KB - Virtual size: 6KB

.rsrc Size: 100KB - Virtual size: 100KB

.text
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 100KB - Virtual size: 100KB