3ac376da24fbc88db2a86b01c07b8d26

General

Target

3ac376da24fbc88db2a86b01c07b8d26
Size

187KB
MD5

3ac376da24fbc88db2a86b01c07b8d26
SHA1

2c71344a9ccb30977216177dd36915992746d267
SHA256

94e0ae35a67926f9788b763eb426d3d888429bd728f30d79e4903b3df4c4de6d
SHA512

b84101627fe3d537dd806e02cc4ac9948d3457112e949602d4c90488149694b8ad132644c1281f396cc0a3cecff2fca7c0bf6d0099b05cfaea69aacebea5b452
SSDEEP

3072:HjW1apu5JUQ3F1XoExEhW58axcoQvFnLw9kNv9zRNrWXq6WE3wFbHpRP5AwSu:JuvtDXF5XDQvxyqvPNrWXFWEgFP5Cu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ac376da24fbc88db2a86b01c07b8d26

Files

3ac376da24fbc88db2a86b01c07b8d26
.exe windows:4 windows x86 arch:x86

62341e6895e77320b4b708fff150f412

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueA
RegOpenKeyExA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueExA
RegEnumKeyExA

ole32

CreateItemMoniker
GetRunningObjectTable
CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree
CoInitializeEx
CoRegisterClassObject
CoInitialize
CLSIDFromString
CoRevokeClassObject
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
StringFromCLSID
CoTaskMemAlloc

winmm

timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod

kernel32

GetSystemTimeAsFileTime
ResumeThread
CreateFiberEx
SetEvent
ClearCommError
GetACP
DeleteCriticalSection
LocalFree
CreateEventA
CreateThread
EnumResourceNamesA
FatalExit
InitializeCriticalSection
WaitForSingleObject
CloseHandle
GetVersionExA
EnterCriticalSection
GetCurrentProcessId
LeaveCriticalSection

quartz

AMGetErrorTextW

shell32

SHGetSpecialFolderPathA

user32

MsgWaitForMultipleObjects
PeekMessageA
CopyRect
PostThreadMessageA
CreateWindowExA
wsprintfA
LoadStringA
RegisterWindowMessageA
GetMessageA
wvsprintfA
DispatchMessageA
MonitorFromWindow
GetQueueStatus
RegisterClassA
DestroyWindow

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62341e6895e77320b4b708fff150f412

Headers

File Characteristics

Imports

advapi32

ole32

winmm

kernel32

quartz

shell32

user32

Sections

.text Size: 170KB - Virtual size: 170KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 13KB - Virtual size: 12KB

.lib Size: 512B - Virtual size: 72KB

.text
Size: 170KB - Virtual size: 170KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 13KB - Virtual size: 12KB

.lib
Size: 512B - Virtual size: 72KB