8dd7d00648211906c33293e45aa6752c

General

Target

8dd7d00648211906c33293e45aa6752c
Size

56KB
MD5

8dd7d00648211906c33293e45aa6752c
SHA1

51534f4ab91179ded11835b8bc6a544c66626680
SHA256

c6497ccb37d1ab51193949ca95d9356d41000fef016a8f2c0060172eb7da86a1
SHA512

5889641eb264bf6a7a234bf8b3d3ce37a0b415173dac4ebd0ccb3357fb5fe17ac4b14dad503b3d7f5bb8355b720c556c43bfc361342ca81b3b99786d8507e166
SSDEEP

768:93EngI5Z99cOe8jf/a+F6bHQbSaKhoPGuaJczADat:NCf5ZU8EbHQSVKP/zZt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd7d00648211906c33293e45aa6752c

Files

8dd7d00648211906c33293e45aa6752c
.exe windows:4 windows x86 arch:x86

153141af541e04e6e56970e104b1261b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA

user32

wsprintfA

shlwapi

PathAppendA

shell32

ShellExecuteA
SHGetFolderPathA

kernel32

SetStdHandle
WriteConsoleW
GetConsoleOutputCP
GetSystemDirectoryA
lstrcpyA
lstrlenA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
CreateProcessA
GetStartupInfoA
CopyFileA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetLastError
GetFileAttributesA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
Sleep
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
HeapSize
WriteConsoleA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

153141af541e04e6e56970e104b1261b

Headers

File Characteristics

Imports

advapi32

user32

shlwapi

shell32

kernel32

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB