3a132d79ff5b577c8ea00bad8da6304d

General

Target

3a132d79ff5b577c8ea00bad8da6304d
Size

283KB
MD5

3a132d79ff5b577c8ea00bad8da6304d
SHA1

3347daee9fa051b316b93c1541bbb0908696c2f8
SHA256

c8ca2cde76eafffe4bb6640ef8f9eb5acefaf0efaec37048ff058400248ab019
SHA512

9ac5912a9771f76c423f62bc6d7a0cc941ed6f1f59429ddc70d18d614f8d7378f62324eeea244e0af17cb5183c4d8fcb99c2f3f07078803d53b48752c76d610a
SSDEEP

6144:VDplsxscrEZGUT1eIbLNPSkLpwDDMfZbwVts92qo1bY:1byEZTeWsJDMdwV292qo1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a132d79ff5b577c8ea00bad8da6304d

Files

3a132d79ff5b577c8ea00bad8da6304d
.exe windows:4 windows x86 arch:x86

0a7b71c6423dfd100b58510aef4f14bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

mprapi

MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName

user32

GetDlgItem
IsWindow
SendMessageA
EnumChildWindows
CreateWindowExW
DestroyWindow
GetWindowThreadProcessId

shell32

SHGetFolderPathW

kernel32

GetVersionExA
TlsAlloc
GetFileType
TerminateProcess
TlsFree
AddAtomA
GetModuleFileNameA
GetSystemInfo
SetLastError
HeapSize
GetOEMCP
QueryPerformanceCounter
UnhandledExceptionFilter
FreeEnvironmentStringsA
VirtualAlloc
VirtualFree
GetCPInfo
EnumResourceLanguagesA
GetCurrentProcessId
GetStartupInfoA
TlsGetValue
GetSystemTimeAsFileTime
SetHandleCount
FreeEnvironmentStringsW
InterlockedExchange
TlsSetValue
SetEndOfFile
GetEnvironmentStringsW
GetACP
lstrcpyW
GetLocaleInfoA
GetEnvironmentStrings
HeapDestroy
VirtualQuery
HeapCreate
GetStdHandle
GetCurrentProcess
WriteFile
IsBadWritePtr
SetUnhandledExceptionFilter

Sections

.text
Size: 144KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a7b71c6423dfd100b58510aef4f14bd

Headers

File Characteristics

Imports

newdev

iphlpapi

setupapi

mprapi

user32

shell32

kernel32

Sections

.text Size: 144KB - Virtual size: 279KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 135KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 279KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 135KB

.rsrc
Size: 512B - Virtual size: 4KB