96fffad9bf627072fc7cf65d0c923bed

General

Target

96fffad9bf627072fc7cf65d0c923bed
Size

28KB
MD5

96fffad9bf627072fc7cf65d0c923bed
SHA1

3f93881fc3c4912ee3eaf564cd2f0df78aeb35dc
SHA256

128b52db970ca5a9be607730efe40b811524917aee1540bfc8510c306e4c54b2
SHA512

1287cfd7c664e8826d28f8f79b895f22d8b01ef9df6e28bed8d2915c836b8ac2f4c4209e72f39037e5246243bf51f6222fc3f596b4d10b0ac1299551370b85dc
SSDEEP

192:GaXKK/hzPg115BY0NvaAmCe2o+AaF4R8d2r+wG+AVbwFtInaUledIx4+vkTnaU0g:G0hk1LbMPnK2IF+YazdI6ZnbpJEv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96fffad9bf627072fc7cf65d0c923bed

Files

96fffad9bf627072fc7cf65d0c923bed
.dll windows:4 windows x86 arch:x86

942c51bb4ada4e10da3fb08cb17dc42f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateMutexA
OpenProcess
GetCurrentProcessId
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
FindClose
FindNextFileA
lstrcpynA
lstrcpyA
lstrcmpA
FindFirstFileA
VirtualProtectEx
LoadLibraryA
ReleaseMutex
Module32Next
Module32First
ReadFile
GetModuleFileNameA
LocalAlloc
lstrcatA
CreateThread
Sleep
IsBadReadPtr
WinExec
TerminateProcess
GetCurrentProcess
GetSystemDirectoryA
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
lstrlenA
CreateFileA
WriteFile
CloseHandle
GetTempPathA

user32

GetForegroundWindow
wsprintfA
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
GetWindowTextA

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA

shlwapi

StrStrA
StrStrIA

wininet

InternetCloseHandle

msvcrt

_itoa
strcmp
strcat
sprintf
_purecall
strlen
memcmp
strstr
memcpy
??2@YAPAXI@Z
strncat
_except_handler3
memset
??3@YAXPAX@Z

Sections

.bss
Size: - Virtual size: 64.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

942c51bb4ada4e10da3fb08cb17dc42f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

wininet

msvcrt

Sections

.bss Size: - Virtual size: 64.1MB

.data Size: 18KB - Virtual size: 17KB

.reloc Size: 9KB - Virtual size: 9KB

.bss
Size: - Virtual size: 64.1MB

.data
Size: 18KB - Virtual size: 17KB

.reloc
Size: 9KB - Virtual size: 9KB