58234c05e2842b0b3a22d4315802cbdb

Sharing

Copy URL Twitter E-mail

General

Target

58234c05e2842b0b3a22d4315802cbdb
Size

67KB
MD5

58234c05e2842b0b3a22d4315802cbdb
SHA1

a3d9702f7037c0504f4949baabf74a79391395c7
SHA256

94dac04c174aab7879b03f939c5af77d339e2b5b2363f828579d18e1b96bbb25
SHA512

af0a0d74927d9eaff326e1ab4185d6e44445481c1b6fb10fe4f19bfb783e47dc49be759a29d896df0b28f4f84d7f2c81b2576fffb977f67557f2f6787e1eab74
SSDEEP

1536:L9VqaI/9XFc+PsBHEMkV0HOBlB0tpSbP2tImfPhPU0X2oGZAeU8Ph1/:DqRXJukMkyun+FHPU0X/ujU8Ph1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58234c05e2842b0b3a22d4315802cbdb

Files

58234c05e2842b0b3a22d4315802cbdb
.dll windows:4 windows x86 arch:x86

45d6ec62d3efa48491257c6babf64e68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
WaitForSingleObject
ReleaseMutex
CreateProcessW
CreateMutexW
WideCharToMultiByte
GlobalAlloc
GetFileSize
SetFilePointer
CreateEventW
CreateThread
SetEvent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
SetLastError
GetProcAddress
FreeLibrary
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
DisableThreadLibraryCalls
GetWindowsDirectoryA
lstrcatA
GetFileAttributesA
CallNamedPipeA
OpenEventA
lstrlenA
lstrcpyA
GetLastError
lstrcatW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
lstrcmpW
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
WriteFile
VirtualProtect

user32

EnableWindow
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
PeekMessageW
SetForegroundWindow
SetFocus
FindWindowW
GetProcessWindowStation
LoadStringW
GetMessageW
SendNotifyMessageW
MessageBoxW
GetUserObjectInformationW

advapi32

RegQueryValueExW
RegEnumKeyW
RegCloseKey
RegEnumValueW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
ChangeServiceConfigA
CreateServiceA
QueryServiceStatus
StartServiceA
OpenSCManagerA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
OpenServiceA
RegOpenKeyExW

rpcrt4

RpcBindingFree
NdrClientCall2
RpcMgmtIsServerListening
RpcStringFreeW
RpcSmDestroyClientContext
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW

msvcrt

exit
malloc
wcscmp
_wcsicmp
wcslen
wcsncmp
_wcsnicmp
_vsnwprintf
memmove
free
_adjust_fdiv
_initterm
_amsg_exit
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
time
__CxxFrameHandler

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45d6ec62d3efa48491257c6babf64e68

Headers

File Characteristics

Imports

kernel32

user32

advapi32

rpcrt4

msvcrt

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 512B - Virtual size: 33KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 512B - Virtual size: 33KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB