8d41bae37883b92a776d3df981f53068

General

Target

8d41bae37883b92a776d3df981f53068
Size

173KB
MD5

8d41bae37883b92a776d3df981f53068
SHA1

b2e6c78a303a5c86d82649eba13cebc4692fb62a
SHA256

e657ba5ae40ae45d03e93bdc08662a4523572c48e245cc5e2b35c2d15642d0ac
SHA512

6609c512520c7dfc5fe4af831e22b54d1520e530f9c324c8ca8a3674d02f2e8ccf92f7f333d86445ffcac1ffc4ab09a0a2996d60febe5e288f9598f2cc300dd9
SSDEEP

3072:mWaxnaAD8CFG+a8oaLbkTukdxNPvuOffLL9NAt412s0gWzCEwSX7fXyr:/axau4+aHTuqvuOffLhNAS2s0dCE/LfK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d41bae37883b92a776d3df981f53068

Files

8d41bae37883b92a776d3df981f53068
.exe windows:4 windows x86 arch:x86

9f408052f9e6520a9deaebdbb1e0ee1b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetSystemTimeAsFileTime
VirtualFree
GlobalUnlock
GetModuleFileNameW
AddAtomW
GetFileAttributesA
GetSystemTime
DeleteFileA
SetFilePointer
GetLastError
DisableThreadLibraryCalls
MultiByteToWideChar
GetTempPathA
QueryPerformanceCounter
GlobalFree
GetCurrentThreadId
LocalAlloc
WideCharToMultiByte
CloseHandle
CopyFileA
InterlockedIncrement
GetModuleFileNameA
CreateDirectoryA
GetFileSize
GlobalLock
VirtualAlloc
EnumResourceNamesA
GetTempFileNameA
Sleep
LocalFree
lstrlenA
InterlockedDecrement
GetVolumeInformationA
ReadFile
CreateMutexA
GetTickCount
WriteFileGather
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
CreateFileA
WaitForSingleObject
DeviceIoControl
GetVersionExA
GetCurrentProcessId
SetFileAttributesA
FreeLibrary

advapi32

RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegCloseKey

lz32

LZClose
LZCopy
LZOpenFileA

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f408052f9e6520a9deaebdbb1e0ee1b

Headers

File Characteristics

Imports

kernel32

advapi32

lz32

setupapi

Sections

.text Size: 92KB - Virtual size: 235KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 78KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 235KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 78KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 4KB