7513e57c331cd7120208f3a584eea311

General

Target

7513e57c331cd7120208f3a584eea311
Size

69KB
MD5

7513e57c331cd7120208f3a584eea311
SHA1

46e98bd37f3f5671515d496d683d7be1649fbf9d
SHA256

e2753d1f94c725eb27f84f357dacff3798f150f7ad9dd79670e69ad47a9f97ca
SHA512

7947a8614d9d7f5c1e7b3469c1127f397fcc7dc325952fd53f829e39869e1908b0900793a1380043fb2a3b4d3576f33ce2ad67fde18c4d3f3ace9ed6cf64a572
SSDEEP

1536:8cTRKSxseQFLQw+rn7TZOdzcbHNO8GSno1dvyia1i7atcAZ:8cTFxseQFYnjbuSo1pyTiGS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7513e57c331cd7120208f3a584eea311

Files

7513e57c331cd7120208f3a584eea311
.exe windows:4 windows x86 arch:x86

f84533525da3d5ede872b1803897e0f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
LoadLibraryA
lstrcpyA
lstrcmpiA
SetLastError
GetFileAttributesA
lstrcmpA
SetFilePointer
Sleep
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
ReadFile
GetTempPathA
GetTickCount
FindResourceA
LoadResource
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
Process32Next
WriteFile
lstrlenA
CloseHandle
FreeResource
MoveFileA
SetFileAttributesA
DeleteFileA
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
lstrcatA
GetLastError
GetProcessHeap
HeapAlloc
GetModuleHandleA
GetProcAddress
HeapFree
CreateToolhelp32Snapshot
Process32First
GetCurrentProcessId
SetUnhandledExceptionFilter

user32

PostThreadMessageA
wsprintfA
GetInputState
GetMessageA

advapi32

AddAce
StartServiceA
GetUserNameA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle

msvcrt

_acmdln
_stricmp
_except_handler3
realloc
malloc
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

netapi32

NetUserGetLocalGroups
NetApiBufferFree

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f84533525da3d5ede872b1803897e0f6

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

netapi32

Sections

.text Size: 10KB - Virtual size: 9KB

.rsrc Size: 58KB - Virtual size: 57KB

.text
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 58KB - Virtual size: 57KB