891a7a0b55ece12063a099790e4f801c

General

Target

891a7a0b55ece12063a099790e4f801c
Size

270KB
MD5

891a7a0b55ece12063a099790e4f801c
SHA1

c8860874dfa7c30b285addc5583b21416b007ef9
SHA256

6c915c056157e85084f7c1458f79fc36325eb89013ecce5294043304fd6b972d
SHA512

20db82816abeeef231fbeeb5cd68f47b89ee65bb0b51a5cd4441eb0854b69096ad6e394e8246ac8c4c16e3be7c62640c68ab559e96a3e47953320b8a70c39575
SSDEEP

6144:a/m3EykWU+WNLtZa2XNQCZ3x2jRDXe6qzif0froq:amUyw+u7a2XpB2dTVqziao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
891a7a0b55ece12063a099790e4f801c

Files

891a7a0b55ece12063a099790e4f801c
.exe windows:4 windows x86 arch:x86

cfe48812dbffb00dfa6786a57fd6994d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

user32

SendMessageA
CreateWindowExW
DestroyWindow
IsWindow
GetDlgItem
EnumChildWindows
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

shell32

SHGetFolderPathW

newdev

UpdateDriverForPlugAndPlayDevicesW

kernel32

GetCurrentProcessId
AddAtomA
GetVersionExA
HeapSize
SetEndOfFile
VirtualQuery
GetCPInfo
HeapDestroy
GetCurrentProcess
GetStartupInfoA
FreeEnvironmentStringsA
TerminateProcess
TlsAlloc
VirtualAlloc
SetLastError
GetACP
GetEnvironmentStrings
TlsGetValue
VirtualFree
QueryPerformanceCounter
InterlockedExchange
GetEnvironmentStringsW
EnumResourceLanguagesA
UnhandledExceptionFilter
TlsFree
GetNumberFormatW
TlsSetValue
HeapCreate
GetOEMCP
WriteFile
GetLocaleInfoA
GetModuleFileNameA
GetSystemInfo
GetStdHandle
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetFileType
IsBadWritePtr
SetHandleCount
SetUnhandledExceptionFilter

iphlpapi

GetIpAddrTable

Sections

.text
Size: 131KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfe48812dbffb00dfa6786a57fd6994d

Headers

File Characteristics

Imports

setupapi

user32

mprapi

shell32

newdev

kernel32

iphlpapi

Sections

.text Size: 131KB - Virtual size: 279KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 131KB - Virtual size: 279KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 512B - Virtual size: 4KB