2d00aa076313bfc774ff2ff36fed7c76

General

Target

2d00aa076313bfc774ff2ff36fed7c76
Size

398KB
MD5

2d00aa076313bfc774ff2ff36fed7c76
SHA1

4a514d02206c04bf831f596ada78b473fb3a28c8
SHA256

3d7035221b7a9fc5cd2d2dbc8b988983c5a85ec16cd767efa0cf6e9b2fa0d881
SHA512

42051a98cff6a81cf8945d46cadcd0dff89a8704f8850e9e627ad8c98790fb92e4808c6c141b190958b5fb3aa458282ac876ca5bc3bc5b28c646eb0c5dd4a9e9
SSDEEP

12288:RKns2bx1ITUQAYEsAyATxqbiwK3TUMI1egeWNPoOAl:90rITUQAZs1sQbiwgwcgeWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d00aa076313bfc774ff2ff36fed7c76

Files

2d00aa076313bfc774ff2ff36fed7c76
.exe windows:4 windows x86 arch:x86

c7f5da13af46ce7209fb1ab183f9821f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GetVersion
GetStdHandle
GetStartupInfoA
RtlUnwind
GetCommandLineA
GetModuleFileNameW
GetCurrentProcess
GetProcAddress
VirtualAlloc
HeapCreate
TlsSetValue
HeapReAlloc
VirtualFree
FreeEnvironmentStringsW
UnhandledExceptionFilter
LeaveCriticalSection
InterlockedExchange
GetModuleFileNameA
SetHandleCount
GetModuleHandleA
ExitProcess
TlsFree
GetStartupInfoW
EnterCriticalSection
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
WriteFile
IsBadWritePtr
GetCurrentThread
QueryPerformanceCounter
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStringsW
VirtualQuery
GetCurrentThreadId
InitializeCriticalSection
HeapAlloc
GetFileType
HeapFree
DeleteCriticalSection
TerminateProcess
GetCurrentProcessId
GetLastError
TlsAlloc
GetCommandLineW
LocalSize
GetEnvironmentStrings
HeapDestroy
TlsGetValue

shell32

CheckEscapesW

advapi32

RegOpenKeyW
CryptSetKeyParam
RegSaveKeyW
CryptSetProviderExW
ReportEventW
LookupPrivilegeNameW
RegLoadKeyA
RegSaveKeyA
RegQueryValueW
InitiateSystemShutdownA
LookupAccountSidA
CryptVerifySignatureA
RegReplaceKeyW
RegRestoreKeyA
RegSetValueExW
RegQueryInfoKeyW
RegSetValueExA
RegDeleteValueA
RegOpenKeyExW
RegQueryMultipleValuesA
RegFlushKey
LogonUserA
RegSetKeySecurity
CreateServiceA

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7f5da13af46ce7209fb1ab183f9821f

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

Sections

.text Size: 124KB - Virtual size: 123KB

.data Size: 265KB - Virtual size: 296KB

.rsrc Size: 8KB - Virtual size: 7KB

.text
Size: 124KB - Virtual size: 123KB

.data
Size: 265KB - Virtual size: 296KB

.rsrc
Size: 8KB - Virtual size: 7KB