46ae474330551e4dd3392b8e7c4eb5a2

General

Target

46ae474330551e4dd3392b8e7c4eb5a2
Size

54KB
MD5

46ae474330551e4dd3392b8e7c4eb5a2
SHA1

89aa497e6fe60e8e29c85166e9021001d20308fb
SHA256

b07dfd39040967f3a8d2b61e26d978810a31156b4168c4af04c15ff3d32ba3d7
SHA512

8a4fac5a30f62b8b27f3a826e9ad82e591c1347bd3f48186ac99a2a36a97526b20aecf9a2bb420ad358d3cb023d29c620202ba559877a93294cbab295584f650
SSDEEP

768:82VcQfmGPZ18Dba+fW3nz74aIg0n5hJPCtvwkpGx4uVwaiIrk/FP3t07ufaiDfC:8WcQfzPsbatz74L5hJBkMnwaMp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ae474330551e4dd3392b8e7c4eb5a2

Files

46ae474330551e4dd3392b8e7c4eb5a2
.exe windows:5 windows x86 arch:x86

3fcc781e04b715654456aec08cd3b572

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaRemovePrivilegesFromAccount
BuildExplicitAccessWithNameW
LsaQueryInfoTrustedDomain
SetEntriesInAuditListW
GetOldestEventLogRecord
IsTokenRestricted
InitiateSystemShutdownExW
PrivilegedServiceAuditAlarmW
LsaOpenTrustedDomain

gdi32

GdiInitSpool
EnumFontFamiliesExA
GdiGradientFill
GetPaletteEntries
Ellipse

msvcrt

_wspawnl
_yn
_fmode
_stat64
strtol
freopen
fsetpos
modf
iswupper
_snwprintf

kernel32

CreateFileA
GetStartupInfoA
FileTimeToSystemTime
MoveFileW
GetCommandLineA
GetModuleHandleA
ReadConsoleA
ReadConsoleInputExW
GetLongPathNameW
HeapQueryTagW
HeapCreateTagsW
FileTimeToSystemTime
CreateFileMappingW
GlobalUnWire
GetVolumePathNameA

ole32

CreateItemMoniker
StringFromCLSID
CoCreateInstance
CoGetTreatAsClass
OleCreateEmbeddingHelper
OleDestroyMenuDescriptor

user32

GetScrollPos
GetMenu
GetCursorPos
CharLowerBuffA
NotifyWinEvent
GetAppCompatFlags2
DefDlgProcW
GetAltTabInfoA

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fcc781e04b715654456aec08cd3b572

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

gdi32

msvcrt

kernel32

ole32

user32

Sections

.text Size: 50KB - Virtual size: 50KB

.data Size: 2KB - Virtual size: 44KB

.rsrc Size: 1024B - Virtual size: 852B

.text
Size: 50KB - Virtual size: 50KB

.data
Size: 2KB - Virtual size: 44KB

.rsrc
Size: 1024B - Virtual size: 852B