96bc49978e5e3f30cb2a42066344979c

General

Target

96bc49978e5e3f30cb2a42066344979c
Size

184KB
MD5

96bc49978e5e3f30cb2a42066344979c
SHA1

d25364777ebdbe0575a0e1810190d2ab96b2960b
SHA256

3c47c1ad9eb587b03cf3f1b5afb6292db05b5bf1765a6499f993e77b73a17fd0
SHA512

84ca064cf4a0a41581a32e5bfef49e1d1540bd37a8d083f63755885f37fc9b4fee470da278945cb89775b926008cb52bb8f1ff81846c362ec8187809364ef508
SSDEEP

3072:u+ewIum79Rhe2CId6RRbf29xeEgAg7pbAc7o0EWjeNxbiEup/NchYz040tR11nX5:5ewZm79Rs2CId67bf29xeEgAg7pbD7oH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96bc49978e5e3f30cb2a42066344979c

Files

96bc49978e5e3f30cb2a42066344979c
.exe windows:4 windows x86 arch:x86

cf619c331a37fe5edd5515fe6412128e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

rpcrt4

UuidToStringA

user32

wsprintfA

advapi32

DeleteService
CloseServiceHandle
OpenSCManagerA
RegOpenKeyExA
OpenServiceA
StartServiceA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
CreateServiceA

shlwapi

SHEnumValueA
SHEnumKeyExA
SHSetValueA
StrStrIA
SHGetValueA

shell32

SHGetSpecialFolderPathA

msvcrt

malloc
strerror
??2@YAPAXI@Z
islower
isxdigit
isalpha
strcat
isgraph
wctomb
__mb_cur_max
isdigit
atoi
strncpy
rand
wcscpy
mbstowcs
srand
time
isupper
free
tolower
isalnum
printf
memcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
ispunct
isspace
sprintf
strlen
fopen
fwrite
fclose
memset
memcpy
strcpy

imagehlp

ImageNtHeader

kernel32

SetFileTime
GetFileAttributesExA
GetModuleHandleA
GetLastError
CreateFileA
SleepEx
GetLocalTime
GetVersionExA
ExitProcess
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
lstrlenA
GetSystemDirectoryA
GetStartupInfoA
GetFileAttributesA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf619c331a37fe5edd5515fe6412128e

Headers

File Characteristics

Imports

ole32

rpcrt4

user32

advapi32

shlwapi

shell32

msvcrt

imagehlp

kernel32

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 108KB - Virtual size: 106KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 108KB - Virtual size: 106KB