73f85b456ebdbb2e5b0f835e25a0827e

General

Target

73f85b456ebdbb2e5b0f835e25a0827e
Size

52KB
MD5

73f85b456ebdbb2e5b0f835e25a0827e
SHA1

86a7547ce6d772394029204a79a71e5eeaac0a47
SHA256

435e774444eeaa62d456be9a703fc76c611719134f8c08ee4a4dae3a129d1b83
SHA512

b2a0d3417ffdf569b34c490b3446e09cb82f43c777560ca56314376e26159baf6628cbe316be9ef41129b45f63cef6d9a2fab9dc8c9211d1ddd1fcc445942f63
SSDEEP

768:zyYpqBElI5AEezoEyZzRwVpZS4gsDueo:zyYpV9z9yZzmVlgOo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73f85b456ebdbb2e5b0f835e25a0827e

Files

73f85b456ebdbb2e5b0f835e25a0827e
.exe windows:4 windows x86 arch:x86

f12e399719ba66f8394167e57afd5103

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpr

WNetAddConnection2A
WNetGetUserA
WNetCancelConnection2A

netapi32

NetUserEnum
NetApiBufferFree
NetLocalGroupGetMembers
NetLocalGroupEnum
NetUserModalsGet
NetQueryDisplayInformation
NetShareEnum

kernel32

GetEnvironmentStringsW
GetFileType
GetStartupInfoA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
lstrlenW
LocalFree
FormatMessageA
HeapDestroy
HeapCreate
SetEndOfFile
FlushFileBuffers
LCMapStringA
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
MultiByteToWideChar
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetTimeZoneInformation
SetHandleCount
GetStdHandle
LCMapStringW
GetStringTypeW
CloseHandle
CreateFileA
VirtualFree
HeapFree
RtlUnwind
WriteFile
SetFilePointer
HeapAlloc
GetOEMCP
ReadFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
LoadLibraryA
GetProcAddress
SetStdHandle

advapi32

LsaOpenPolicy
LsaQueryInformationPolicy
LsaFreeMemory
LsaEnumerateTrustedDomains

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f12e399719ba66f8394167e57afd5103

Headers

File Characteristics

Imports

mpr

netapi32

kernel32

advapi32

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 160B

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 160B