3b8f87079fce16c9c1f783eb8b32bca1

General

Target

3b8f87079fce16c9c1f783eb8b32bca1
Size

188KB
MD5

3b8f87079fce16c9c1f783eb8b32bca1
SHA1

07290367555b5425f251cea15fcf0b80d9869b74
SHA256

f65e3b4d50678e029200ca23c6be405ab45dec826c1c53707d9f3b210e7ee8ed
SHA512

650edec5c58d27e742a637303957dcef0e672ac6450af833f50c44becd569e9d54997c7069fcd537c42aa0527c902f9ecd261735ce89ecc83947c668631c6cb2
SSDEEP

3072:DkF4PE9+3nyYA69OnAObeSCxkam9NgznygHN5rWyE:DkFEmYAIOnAUeIamDKrBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b8f87079fce16c9c1f783eb8b32bca1

Files

3b8f87079fce16c9c1f783eb8b32bca1
.exe windows:4 windows x86 arch:x86

d32ab7873e0848b33f2390b38451a491

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidToStringA

advapi32

OpenSCManagerA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

user32

wsprintfA

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

shlwapi

SHEnumValueA
StrStrIA
SHSetValueA
SHGetValueA
SHEnumKeyExA

shell32

SHGetSpecialFolderPathA

msvcrt

strerror
wctomb
__mb_cur_max
isxdigit
atoi
isalpha
strlen
rand
wcscpy
mbstowcs
sprintf
srand
isgraph
fclose
fwrite
fopen
isalnum
ispunct
isupper
tolower
strcat
strcpy
islower
isspace
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
??2@YAPAXI@Z
time
memset
malloc
memcpy
memcmp
free
strncpy

imagehlp

ImageNtHeader

kernel32

GetModuleHandleA
FindFirstFileA
GetStartupInfoA
GetPrivateProfileStringA
FindNextFileA
WideCharToMultiByte
GetFileAttributesExA
SetFileTime
lstrlenA
GetSystemDirectoryA
GetLocalTime
GetVersionExA
ExitProcess
CreateFileA
CloseHandle
GetLastError
GetFileAttributesA
SleepEx

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d32ab7873e0848b33f2390b38451a491

Headers

File Characteristics

Imports

rpcrt4

advapi32

user32

ole32

shlwapi

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 108KB - Virtual size: 107KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 108KB - Virtual size: 107KB