54784ff44ed4f73d7a6ae5b828662480

General

Target

54784ff44ed4f73d7a6ae5b828662480
Size

30KB
MD5

54784ff44ed4f73d7a6ae5b828662480
SHA1

80b117f0d840d9789ca8d90ee7d20eb73dbfbc05
SHA256

fa95978ec4d1850c9f4b13cb639d45063ea15eb5234d629e3bb0c1612a8f72b1
SHA512

273816d89388b6f075ee46e0642f80f22c830bfacf7a9858374972cb6a9b9fd462f272a463c2c2892648f1fe5a684f96017528cd7c0c615540991d775f0f0af1
SSDEEP

768:JOxnE3PqDuEmhMxv1gLa1JNsdta0czVSv7M:JyEoGMxviLakWzVSQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54784ff44ed4f73d7a6ae5b828662480

Files

54784ff44ed4f73d7a6ae5b828662480
.exe windows:4 windows x86 arch:x86

6c6c8b19e405953dad89e6abe5ff602a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
lstrlenA
ReadFile
OutputDebugStringA
DeleteFileA
GetVersionExA
Sleep
Process32Next
CreateFileA
CreateToolhelp32Snapshot
ExitThread
TerminateThread
WaitForMultipleObjects
GetModuleFileNameA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
lstrcatA
WriteFile
SetFilePointer
CloseHandle
LoadLibraryA
GetProcAddress
Process32First
ResetEvent
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
WaitForSingleObject
CreateProcessA
CompareStringA
SizeofResource
LoadResource
FindResourceA
lstrcmpA

user32

PeekMessageA
CloseWindow
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
CreateWindowExA
wsprintfA

advapi32

RegNotifyChangeKeyValue
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCreateKeyA

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6c6c8b19e405953dad89e6abe5ff602a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 668B

.rsrc Size: 5KB - Virtual size: 4KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 668B

.rsrc
Size: 5KB - Virtual size: 4KB