3777905ba38ca3a5c6914608b7da2e5a

General

Target

3777905ba38ca3a5c6914608b7da2e5a
Size

283KB
MD5

3777905ba38ca3a5c6914608b7da2e5a
SHA1

797dbe001a80014fb635d7bdeeef2d1b9733fa67
SHA256

e9adc11cf8dcd43960816aa70f708d572c735fa3c88b20b2bcf5100d4e114e90
SHA512

ab83fb55829c669988f3e06b4e1a4eec16643c6662c43e6cfc34d707164a5ea1255abad5b173479a23c919fba526e8bbfd0949ba74870c5b7c3983b4bd1f1654
SSDEEP

6144:OaTXCv8+AnSmN3j51mRW+hHKCwRpZoManuphWAJVPA0Y8Yk:LzCvTU391mM+ZKFjJanuqOZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3777905ba38ca3a5c6914608b7da2e5a

Files

3777905ba38ca3a5c6914608b7da2e5a
.exe windows:4 windows x86 arch:x86

118c4d258c923194d4d6fea2e0457b9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExW
GetDlgItem
SendMessageA
DestroyWindow
EnumChildWindows
IsWindow
GetWindowThreadProcessId

setupapi

CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetModuleFileNameA
GetCurrentProcessId
GetEnvironmentStringsW
GetCPInfo
UnhandledExceptionFilter
VirtualFree
AddAtomA
TlsGetValue
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapSize
GetStdHandle
TlsAlloc
GetVersionExA
SetLastError
SetHandleCount
TlsSetValue
GetStartupInfoA
HeapCreate
FreeEnvironmentStringsA
EnumResourceLanguagesA
GetCurrentProcess
QueryPerformanceCounter
SetEndOfFile
lstrcpynW
InterlockedExchange
GetSystemTimeAsFileTime
GetLocaleInfoA
VirtualAlloc
WriteFile
GetFileType
IsBadWritePtr
HeapDestroy
GetOEMCP
TlsFree
TerminateProcess
GetSystemInfo
GetACP
VirtualQuery
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

shell32

SHGetFolderPathW

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

Sections

.text
Size: 148KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

118c4d258c923194d4d6fea2e0457b9a

Headers

File Characteristics

Imports

user32

setupapi

kernel32

newdev

shell32

mprapi

iphlpapi

Sections

.text Size: 148KB - Virtual size: 283KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 132KB - Virtual size: 131KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 148KB - Virtual size: 283KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 132KB - Virtual size: 131KB

.rsrc
Size: 512B - Virtual size: 4KB