557fe1216c10e4fe9769da32e7d0fcb8

General

Target

557fe1216c10e4fe9769da32e7d0fcb8
Size

48KB
MD5

557fe1216c10e4fe9769da32e7d0fcb8
SHA1

a7f3359ebcebaf83ca8de49031a59bed8d546965
SHA256

e5f607c5ab8b6ee931b7ccf84c7b8dd29d0f2e3184e2c7a63d722a1bb9eb8fc2
SHA512

d2d67e290c37e839935b9489242f10e7d2fc2c1d34a304a18425a49cecf6e863bac6313552795e725ed222bc6ab39c19afbcb7538bd88f1ead666f5efb13b901
SSDEEP

384:I6mKTNyR29z9C+ogtLRt0haaCRaPYIC9AEnXUHJN8KhmcOncCK0yuG7HPQB/ZEsf:02phDtRtRYBCSRhMz/ZGrU/Zis

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
557fe1216c10e4fe9769da32e7d0fcb8

Files

557fe1216c10e4fe9769da32e7d0fcb8
.exe windows:4 windows x86 arch:x86

d904344c15ad21b12aae655e2c3522c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
LCMapStringA
LCMapStringW
GetTempPathA
CreateFileA
WriteFile
CloseHandle
GetCommandLineA
lstrcmpiA
GetModuleFileNameA
GetCurrentThreadId
Sleep
WinExec
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
GetLocalTime
RtlUnwind
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
FlushFileBuffers

user32

PostThreadMessageA
wsprintfA
CharNextA

advapi32

RegCloseKey
StartServiceCtrlDispatcherA
ControlService
DeleteService
CreateServiceA
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetQueryDataAvailable

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d904344c15ad21b12aae655e2c3522c0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 16KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 16KB