53674fdd4124eb4f393626a7fbf0a63f

Sharing

Copy URL Twitter E-mail

General

Target

53674fdd4124eb4f393626a7fbf0a63f
Size

76KB
MD5

53674fdd4124eb4f393626a7fbf0a63f
SHA1

7746a9fb5eacbaf5a9a514795049eb2868e30f71
SHA256

bb45d5a1a0b6b78ed1a742f7e03e15b912deaa96f16ebc856cfc58fb592b7703
SHA512

1f83f2f0a8649dffe16d9adf837c5fdf3014e9995050eab8b0b6f8dd09ae761932fd298798b393f86e564cd9be0845df90606853a641d46ae1e68c270171b30a
SSDEEP

1536:8u6bjZikfph6C1ZIoTXb3goLH01mznIhkPxLu+tw:7k5ZZjbYxkPxLu+tw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53674fdd4124eb4f393626a7fbf0a63f

Files

53674fdd4124eb4f393626a7fbf0a63f
.exe windows:4 windows x86 arch:x86

340e3776652cb4cc2f94178a63500fa8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetOpenUrlW
InternetGetConnectedState
InternetReadFile
InternetAttemptConnect
InternetOpenW

kernel32

CloseHandle
Sleep
ResumeThread
FileTimeToSystemTime
lstrcpyW
GetModuleFileNameW
CreateFileW
CreateProcessW
GetSystemDirectoryW
CopyFileW
GetTimeZoneInformation
GetLastError
ExitProcess
GetFileTime
SetWaitableTimer
CreateWaitableTimerW
WaitForSingleObject
DeleteFileW
GetSystemTime
GetTickCount
OpenWaitableTimerW
CreateThread
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
WriteFile
lstrcatW
SetFileTime
GetLocalTime
SystemTimeToFileTime
GetCurrentDirectoryW
HeapSize
CreateFileA
FlushFileBuffers
SetCurrentDirectoryW
GetCPInfo
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
MultiByteToWideChar
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA

user32

GetForegroundWindow
SetForegroundWindow
CharLowerW

advapi32

QueryServiceConfigW
OpenServiceW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenSCManagerW
DeleteService
CloseServiceHandle
SetServiceStatus
CreateServiceW
ChangeServiceConfigW

ole32

CoCreateInstance
CLSIDFromProgID
OleInitialize
OleUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
VarBstrCat

iphlpapi

GetIfTable

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

340e3776652cb4cc2f94178a63500fa8

Headers

File Characteristics

Imports

wininet

kernel32

user32

advapi32

ole32

oleaut32

iphlpapi

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 44KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 44KB