4a9f57b3d51e604f79cef5ecd47a8b35

General

Target

4a9f57b3d51e604f79cef5ecd47a8b35
Size

172KB
MD5

4a9f57b3d51e604f79cef5ecd47a8b35
SHA1

e93951c827fbdd4aa15f1fedbc798d644c3b2013
SHA256

cb62c79b5be0f8faf2980d6df3c0aaf1c09f65654d4f73df417d698bed0ce35b
SHA512

e3c81151e6b713d2c375f3d66bf1fa3f9b2b95543576a20b66f331d6049c29f77191d5b0bc8c86d177bbdf5705805af6fc8e3594e784c8aa96025239ef263ce4
SSDEEP

3072:0WreCqM1spEJkZ1M0fjdHIWdHUWBPd5tFSA1/fsYjzs:TqfMgEJi1JZHJd0Qd5HPzjI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9f57b3d51e604f79cef5ecd47a8b35

Files

4a9f57b3d51e604f79cef5ecd47a8b35
.exe windows:4 windows x86 arch:x86

979239bff7f6920628df28a4a6231ed8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
lstrlenA
SetLastError
Sleep
SizeofResource
LoadResource
FindResourceA
GetModuleFileNameA
CreateEventA
lstrcatA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetStringTypeA
LCMapStringW
lstrcpyA
lstrcpynA
CreateFileA
WriteFile
CloseHandle
MoveFileA
GetModuleHandleA
GetProcAddress
GlobalAlloc
LoadLibraryExA
GlobalFree
GetLastError
FreeLibrary
DeviceIoControl
WinExec
LCMapStringA
MultiByteToWideChar
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeW

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle

shlwapi

PathFileExistsA
StrRChrA

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

979239bff7f6920628df28a4a6231ed8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 6KB

.rsrc Size: 136KB - Virtual size: 132KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 136KB - Virtual size: 132KB