483227c1a550e255d6c51c2ad861ee8b

General

Target

483227c1a550e255d6c51c2ad861ee8b
Size

387KB
MD5

483227c1a550e255d6c51c2ad861ee8b
SHA1

7bf82ab0481365060c79c683ff5c9044d3429492
SHA256

6844be916133cae82bd88fc18f94294959ec1cae7039a3e12908caf32b804e3a
SHA512

f4c6f59e0c5c29934dea69faab460a199bbdd12c78ea04da1d14760df3d9a9c6aa8b0e614cbebd142b43bb2b12e246d7c1b80ebb6ce3fb5796c135dfc10ce8c2
SSDEEP

12288:ax6zorLaZ/xrAW7QzJrpDwJuSXTPJYTpE0/Av:TI2YzFd+TPJYtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
483227c1a550e255d6c51c2ad861ee8b

Files

483227c1a550e255d6c51c2ad861ee8b
.exe windows:5 windows x86 arch:x86

11243b9834c5c98054e57713245b36ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
BackupWrite
GetSystemDefaultLCID
GetShortPathNameW
GetVersionExA
GetVDMCurrentDirectories
PeekConsoleInputW
WriteTapemark
ReadFileEx
GetStartupInfoA
GetCommandLineA
EnumSystemLanguageGroupsA
GetConsoleDisplayMode
GetDiskFreeSpaceExA
ReadProcessMemory

gdi32

PATHOBJ_vEnumStartClipLines
GdiGetPageCount
CreateFontIndirectA
GdiPlayEMF
OffsetViewportOrgEx

ole32

OleGetAutoConvert
HBITMAP_UserSize
CoGetCallerTID
StgOpenStorageOnILockBytes
WriteClassStm
StgOpenStorageOnILockBytes

user32

GetActiveWindow
DlgDirListA
EnumWindowStationsW
SetKeyboardState
VkKeyScanW
DdeFreeStringHandle
GetKeyboardType
SetClassLongA

msvcrt

toupper
fwscanf
towlower
_ismbcprint
islower
_eof
putchar
_wcsicoll
_mbbtype
_safe_fdiv

advapi32

LogonUserW
RegEnumKeyA
CryptReleaseContext
WmiExecuteMethodW
BuildSecurityDescriptorA
OpenBackupEventLogW
LsaEnumerateAccountsWithUserRight
DuplicateTokenEx
EnableTrace

Sections

.text
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11243b9834c5c98054e57713245b36ea

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

ole32

user32

msvcrt

advapi32

Sections

.text Size: 380KB - Virtual size: 380KB

.data Size: 4KB - Virtual size: 532KB

.rsrc Size: 1024B - Virtual size: 828B

.text
Size: 380KB - Virtual size: 380KB

.data
Size: 4KB - Virtual size: 532KB

.rsrc
Size: 1024B - Virtual size: 828B