58a578af4fe6cc461de5ce84e4cb692a

Sharing

Copy URL Twitter E-mail

General

Target

58a578af4fe6cc461de5ce84e4cb692a
Size

87KB
MD5

58a578af4fe6cc461de5ce84e4cb692a
SHA1

c6baa17654fc56afdd4815e968b313e9765de4a2
SHA256

005e507d12a33817d7ad5ae57f3300a2ad3123904314dd8d3bf92c359b44a28c
SHA512

83c860348922ad960021d6534e7d94b448e6a0edf7763dc14852f2b5522f93fb4614543b2ca556e9291f4da2d798d23b20387fc49b156b0010deb6a822f00ae0
SSDEEP

1536:JxKopT9aMbcRs9XnOyX9GJITyJ/Jt28wGBk5q57QLm3Kr5QdmYYYRY:JxXbcy9eYsJITyaGxSWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58a578af4fe6cc461de5ce84e4cb692a

Files

58a578af4fe6cc461de5ce84e4cb692a
.exe windows:5 windows x86 arch:x86

c6da36bcfcff6fc1332db9111e2f7b38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

expsrv

rtcAtn
__vbaNew
__vbaOnGoCheck
rtcLeftVar
rtcMidVar
rtcCurrentDir
SetMemVar
__vbaVarCopy
__vbaVarTstNe
__vbaLsetFixstrFree
__vbaLineInputStr
__vbaVarTextCmpNe
__vbaBoolVar
rtcErrObj
__vbaLateIdCall
rtcDateDiff
rtcFileLength
rtUI1FromErrVar
rtcInputCountVar
rtcSin
__vbaVarTextTstGt
rtcLenCharVar
__vbaStrVarMove
rtcGetDateBstr

msvcp60

??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
?min@?$numeric_limits@C@std@@SACXZ
??1?$collate@G@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@
??_7bad_alloc@std@@6B@
?do_always_noconv@?$codecvt@GDH@std@@MBE_NXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?is_open@?$basic_fstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?real@?$_Complex_base@O@std@@QAEOABO@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
?transform@?$collate@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD0@Z
??Kstd@@YA?AV?$complex@N@0@ABNABV10@@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ

msvcrt40

_commode
_execv
??_8ifstream@@7B@
_ltow
_CIcos
strtoul
memcmp
_wfindnexti64
??1stdiostream@@UAE@XZ
fscanf

kernel32

InitAtomTable
QueryPerformanceCounter
SetConsoleNumberOfCommandsA
GetCurrentProcessId
GetVolumeInformationW
HeapCreate
GetCurrentThreadId
GetSystemTimeAsFileTime
GetNumberOfConsoleFonts
LoadLibraryA
HeapValidate
GetStartupInfoA
QueueUserAPC
GetLastError
VirtualAlloc
CopyLZFile
CreateSocketHandle
GetTickCount
EnumTimeFormatsA
LoadLibraryExW

setupapi

SetupDiGetClassBitmapIndex
SetupOpenInfFileA
SetupGetStringFieldW
CM_Set_Class_Registry_PropertyA
SetupDiBuildDriverInfoList
SetupCopyErrorW
CM_Request_Device_EjectW
CM_Get_DevNode_Custom_PropertyW
CM_Create_DevNodeW
SetupDiGetDeviceInstallParamsW
SetupDiAskForOEMDisk
pSetupCenterWindowRelativeToParent
pSetupWriteLogError
SetupTermDefaultQueueCallback
pSetupVerifyCatalogFile

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6da36bcfcff6fc1332db9111e2f7b38

Headers

DLL Characteristics

File Characteristics

Imports

expsrv

msvcp60

msvcrt40

kernel32

setupapi

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 21KB - Virtual size: 71KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 21KB - Virtual size: 71KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 300B