5453a72fd50f83b5b6de83380e7d51c0

General

Target

5453a72fd50f83b5b6de83380e7d51c0
Size

180KB
MD5

5453a72fd50f83b5b6de83380e7d51c0
SHA1

2283dd3c3bf894e1a72f6f766c1aba03ed952949
SHA256

796bd3f9355739a8673651c4ee6e2bc03f52a8038f37879ae89429808ba584b6
SHA512

1a04874bf2ee951cdc2e27c518937222ecb2e57279bf38601dea677c7e81252fad73615cc42782c4702581b000a4e836e7fa2b96cbe5895b1e0053f815d774ea
SSDEEP

3072:7stDXEahs/nV7ZCjAJ2qedCDyUp+nPUFm5JN4lORhoZCN81EsjzKDrBoSmfa5pBW:AtogshZ1OEu8IN4lORhoD1EuODrHmfaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5453a72fd50f83b5b6de83380e7d51c0

Files

5453a72fd50f83b5b6de83380e7d51c0
.exe windows:4 windows x86 arch:x86

8f20186d2a507bee7e6e531d6d70da13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

user32

wsprintfA

rpcrt4

UuidToStringA

advapi32

StartServiceA
CreateServiceA
OpenSCManagerA
DeleteService
RegCloseKey
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegSetValueExA
RegCreateKeyExA
CloseServiceHandle
OpenServiceA

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

shlwapi

SHGetValueA
SHEnumKeyExA
SHSetValueA
StrStrIA
SHEnumValueA

msvcrt

strerror
isgraph
malloc
isupper
printf
strlen
isalpha
isalnum
islower
memcpy
memset
free
strcat
strcpy
memcmp
time
rand
fwrite
fclose
fopen
sprintf
strncpy
wcscpy
mbstowcs
srand
atoi
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
isxdigit
__mb_cur_max
wctomb
tolower
??2@YAPAXI@Z
ispunct
isspace

imagehlp

ImageNtHeader

kernel32

SleepEx
GetLastError
GetModuleHandleA
GetLocalTime
GetVersionExA
ExitProcess
lstrlenA
GetSystemDirectoryA
GetFileAttributesExA
SetFileTime
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetStartupInfoA
CreateFileA

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f20186d2a507bee7e6e531d6d70da13

Headers

File Characteristics

Imports

shell32

user32

rpcrt4

advapi32

ole32

shlwapi

msvcrt

imagehlp

kernel32

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 104KB - Virtual size: 103KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 104KB - Virtual size: 103KB