4f2dc71322025365fb2b759e5c6d97e2

General

Target

4f2dc71322025365fb2b759e5c6d97e2
Size

327KB
MD5

4f2dc71322025365fb2b759e5c6d97e2
SHA1

8abe504bd78bf5d8289d5373048cc7fc2c1b9d49
SHA256

98bb8a598b958d3f965bd03534b797c16413e1c261b7353ab2a37a9d2eece6d5
SHA512

2947762769778715976c6c399ec733c858dd11679445f047883c8869998a133ebb6caa82a1142478e49c269693691a24b86ec1d67a3444a152d7653599fb9a74
SSDEEP

6144:fIYswThsoYpJNsdS5TOfWfMfk/kyxfbZA70A:Qfw1s1Nsdo+W0mkyNA71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f2dc71322025365fb2b759e5c6d97e2

Files

4f2dc71322025365fb2b759e5c6d97e2
.exe windows:5 windows x86 arch:x86

6f9ce16fbed5f5f0da952ab9c0109d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

cfgmgr32

CM_Get_Depth_Ex

kernel32

GetCurrentDirectoryW
TerminateProcess
GetModuleHandleW
SetCurrentDirectoryA
GetCommandLineA
GetModuleHandleA
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
TerminateThread
CloseHandle
CreateThread
SetThreadPriority
Sleep
GetCurrentProcess
SetPriorityClass
SetErrorMode
GetCurrentThreadId
lstrlenA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA

crypt32

CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

user32

LoadStringA
LoadStringW

shlwapi

SHGetThreadRef

ole32

CoInitialize
CoUninitialize
CoCreateGuid

Sections

.text
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 802KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f9ce16fbed5f5f0da952ab9c0109d66

Headers

File Characteristics

Imports

cfgmgr32

kernel32

crypt32

user32

shlwapi

ole32

Sections

.text Size: 173KB - Virtual size: 173KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 67KB - Virtual size: 802KB

.rsrc Size: 84KB - Virtual size: 84KB

.text
Size: 173KB - Virtual size: 173KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 67KB - Virtual size: 802KB

.rsrc
Size: 84KB - Virtual size: 84KB