unpacked_loader

Resubmissions

03/01/2024, 14:16

240103-rll7naedbl 3

03/01/2024, 14:14

240103-rj6hhsecgq 3

13/12/2023, 07:15

231213-h29hfsbaa3 3

12/12/2023, 12:07

231212-pap33aebg7 7

Sharing

Copy URL

Twitter E-mail

General

Target

unpacked_loader
Size

548KB
MD5

e896edd461f41af5e002676a51114b03
SHA1

107f8ce705768509ebe7f292165f03fc1812cbce
SHA256

8c820a29108de22fa7bae8d5be4c3fdc7754bf17efe9b1835e21553e955617a8
SHA512

a7745d6fbae12577ba59ae2c702b547de848582acad4548e8112e0a04211c478ae1671c93a983c4e255bec0f713cc525355b466860c417470f754faec254bd55
SSDEEP

12288:RIvQ28RzATbsJZGAvWefvDB9t89+QfL+3X9IG9vyZKomMPw:RI4JRubszWGJi+QfCnCjZtmMI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpacked_loader

Files

unpacked_loader
.exe windows:4 windows x86 arch:x86

a4e1db0a4a50a18273e39198782ee87a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
Sleep
LoadLibraryExA
VirtualAlloc
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
CopyFileA
CreateDirectoryA
GetModuleFileNameW
GetModuleFileNameA
SizeofResource
ExitProcess
lstrcmpiW
GetLocalTime
GetCommandLineW
GetCurrentProcess
MultiByteToWideChar
GetOEMCP
LoadResource
LockResource
GlobalAlloc
GetTickCount
GetWindowsDirectoryA
GetFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
DeviceIoControl
GetStringTypeW
GetLastError
CloseHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetModuleHandleA
GetACP
GetCPInfo
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegQueryValueExA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
RegCloseKey
SetServiceStatus

shell32

CommandLineToArgvW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 508KB - Virtual size: 505KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

a4e1db0a4a50a18273e39198782ee87a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 13KB

.rsrc Size: 508KB - Virtual size: 505KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 13KB

.rsrc
Size: 508KB - Virtual size: 505KB