5015d91f0581b465d285ce7e0e403f63

General

Target

5015d91f0581b465d285ce7e0e403f63
Size

13KB
MD5

5015d91f0581b465d285ce7e0e403f63
SHA1

1dc5cdfa8955d198df5dd58c3fd903a138a098e4
SHA256

9a24e8d0c8af9eb97f2b99225d59dd16092248ead4476110f8998ceae7fec467
SHA512

131cda5e5a50eff6245ae8e2a3a8dc33e064638cb354a4ddcc8ef96eb15833258792ffe69f9348a2b7a2924c6e8e95181bd15439e1ab69327c11ce97ff785569
SSDEEP

192:QNFRr9P6HZsUAyb7NUaQeJplObxvpEJlS8mPqZ1vi16:KFF9hUAG7N5Q+p4b4IY1KQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5015d91f0581b465d285ce7e0e403f63

Files

5015d91f0581b465d285ce7e0e403f63
.dll windows:4 windows x86 arch:x86

422d38171558fcaac7c1bf9052d95bef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
OpenProcess
GetProcAddress
GetModuleHandleA
DeleteFileA
CreateFileA
WriteFile
OpenEventA
Sleep
GetFileSize
ReadFile
GetModuleFileNameA
VirtualFreeEx
ReadProcessMemory
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentProcessId
CreateThread
GetCurrentProcess
CreateEventA
SetThreadPriority
OutputDebugStringA
GlobalUnlock
GetComputerNameA
CreateRemoteThread
GetCurrentThreadId
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
VirtualFree
VirtualProtectEx
VirtualAlloc

user32

UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
GetWindowTextA
GetWindowThreadProcessId
FindWindowA
wsprintfA
GetInputState
PostThreadMessageA
GetMessageA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

422d38171558fcaac7c1bf9052d95bef

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 11KB - Virtual size: 10KB

sdata Size: 512B - Virtual size: 260B

.reloc Size: 1024B - Virtual size: 722B

.text
Size: 11KB - Virtual size: 10KB

sdata
Size: 512B - Virtual size: 260B

.reloc
Size: 1024B - Virtual size: 722B