9824bbd3c2ed7fd8f8873ec878faf0da

Sharing

Copy URL

Twitter E-mail

General

Target

9824bbd3c2ed7fd8f8873ec878faf0da
Size

100KB
MD5

9824bbd3c2ed7fd8f8873ec878faf0da
SHA1

69383dd32c1e95366eed79c1886b082d7f68b6ef
SHA256

c2e0243081f67f6fb1a41e88b68305edc4fd85fa2fa26b1f8ef51001f74d7968
SHA512

af87daaa55d540c99fe4c4b32f1748e955218fd37d797e00e08b859771a133ac9645331938da7c53ec279274bfffe9b49ab03c0300f906feec8cae3190a1e1d1
SSDEEP

1536:IW0ynnE1xA4xwRmIqbLlrir6Hx5zKPREpAT+vOSa5gWQ:X0ynE1x57mwzKZEpAT+vOSa5gWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9824bbd3c2ed7fd8f8873ec878faf0da

Files

9824bbd3c2ed7fd8f8873ec878faf0da
.exe windows:5 windows x86 arch:x86

b0b2e2fd2ef50755e253f4fba4f3d289

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

j:\Build\Software\Releases\AT8.1\AT8\winapps\ATLenovo\release\ADMonitor.pdb

Imports

kernel32

MapViewOfFile
UnmapViewOfFile
GetSystemDirectoryW
CreateDirectoryW
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
GetLocalTime
LeaveCriticalSection
CreateFileMappingW
lstrlenW
FreeLibrary
SetEvent
GetVersionExW
Sleep
LoadLibraryW
WaitForMultipleObjects
GetProcAddress
CreateThread
GetLastError
SetLastError
CreateEventW
InitializeCriticalSection
CloseHandle
WideCharToMultiByte
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
RtlUnwind
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
SetFilePointer
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryA
SetEndOfFile
ReadFile
HeapSize
RaiseException

advapi32

RegCreateKeyExW
RegNotifyChangeKeyValue
RegFlushKey
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
SetNamedSecurityInfoW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0b2e2fd2ef50755e253f4fba4f3d289

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 2KB