538c95d7631b3b575019d2db35ab6e16

General

Target

538c95d7631b3b575019d2db35ab6e16
Size

23KB
MD5

538c95d7631b3b575019d2db35ab6e16
SHA1

cd71323abe4b8002afc39363363c0be3d1c5886e
SHA256

b2ef2e2a5bef2a83ed9ba7c3d5dc48f0f8f2dfc2973f2f506de422d906ecd494
SHA512

94bc7da6eb420cf36944aaa701e370602e8c1eda7ff1fc31f3e4229997a25474c04e30143b3b58858777eba68fcd946e4f2d6e203a566bae3384aa77d8da2c4e
SSDEEP

384:fEEBXFCub/owXXXPavp3hc/VXXX132ecV9Rkn12bWQystFoXXXXXXXXXXXXXXXXx:BB1NbTHSRSVHF3DcV9Rkn12SQywCHHHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
538c95d7631b3b575019d2db35ab6e16

Files

538c95d7631b3b575019d2db35ab6e16
.exe windows:5 windows x86 arch:x86

2acd0ed7e8ae264bbd0f5ff4deda6608

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

gdiPlaySpoolStream
CloseMetaFile
RemoveFontResourceExA
GetSystemPaletteEntries
GdiGetLocalDC
SelectBrushLocal

msvcrt

wcsrchr
__isascii
_execlp
fopen
_getpid
_mbsnbcnt
_close
strncat
wcstoul
_ismbbtrail

kernel32

GetHandleInformation
SetCPGlobal
WriteProfileSectionW
CreateDirectoryW
DeleteFileW
DeleteFiber
LocalSize
CreatePipe
ValidateLocale
ValidateLCType
GetLocalTime
_lcreat
SleepEx
lstrcatA
GetVolumePathNameW

advapi32

QueryServiceStatus
RegReplaceKeyW
RegQueryMultipleValuesA
GetExplicitEntriesFromAclA
GetServiceDisplayNameW
AddAce
RegisterTraceGuidsA
AddAccessAllowedObjectAce
RegisterServiceCtrlHandlerExW

ole32

CoInitializeEx
PropVariantCopy
OleGetIconOfClass
IsValidPtrOut
CreateStreamOnHGlobal
CoTestCancel
CoSuspendClassObjects

user32

GetAppCompatFlags
CreateWindowStationW
GetProcessDefaultLayout
IsClipboardFormatAvailable
GetScrollPos
DrawCaptionTempW
GetCursorPos
GetClassLongW

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2acd0ed7e8ae264bbd0f5ff4deda6608

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

kernel32

advapi32

ole32

user32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 5KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 5KB