3b0b9e8ae29d248415d47f62f0185362

General

Target

3b0b9e8ae29d248415d47f62f0185362
Size

183KB
MD5

3b0b9e8ae29d248415d47f62f0185362
SHA1

500577f6e5edcedf838bccd8f82bbe131e193d00
SHA256

5bb9a6457119c29dc39630f7bb2eb1d78f8a5cd065905145de48aac3e863417c
SHA512

53482942c37666077472f6dfce93750399a69f3c59f71ade5edce8dd3207d5b6425570ec033cb22654665c506140a0f8dad877e8ba32a1e499f658fc6baebf4e
SSDEEP

3072:rsGVdnpCQBQXvMSK3W6G6XA4R8oRjBiI4JOgUdeZy2nHiPGd30NWmxN7/R:LVZEQqXZ8GGtqYItHiOd3uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0b9e8ae29d248415d47f62f0185362

Files

3b0b9e8ae29d248415d47f62f0185362
.exe windows:4 windows x86 arch:x86

ff7ef8ac7f0056d84628d53d41f15e15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
SetUnhandledExceptionFilter
lstrlenA
InitializeCriticalSection
GetModuleHandleA
GetCurrentProcessId
IsBadReadPtr
UnhandledExceptionFilter
EnterCriticalSection
LocalFree
CloseHandle
lstrlenW
InterlockedDecrement
GetACP
GetProcessHandleCount
GetProcAddress
LeaveCriticalSection
EnumResourceTypesA
FreeLibrary
MultiByteToWideChar
LoadLibraryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
CreateFileA
GetLastError
GetTickCount
IsBadWritePtr
GetFileAttributesA
WideCharToMultiByte
GetThreadLocale
InterlockedIncrement
DeleteCriticalSection
InterlockedExchange
ExitProcess
GetCurrentThreadId
IsDebuggerPresent
GetLocaleInfoA
GetVersionExA

shell32

SHGetSpecialFolderPathA

advapi32

RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

user32

wsprintfA
wsprintfW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ff7ef8ac7f0056d84628d53d41f15e15

Headers

File Characteristics

Imports

kernel32

shell32

advapi32

user32

setupapi

ole32

Sections

.text Size: 101KB - Virtual size: 100KB

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: 78KB - Virtual size: 77KB

.edata Size: 1024B - Virtual size: 240KB

.text
Size: 101KB - Virtual size: 100KB

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: 78KB - Virtual size: 77KB

.edata
Size: 1024B - Virtual size: 240KB