98581d25200a1b2532cfd763ae2c6f1d

Sharing

Copy URL

Twitter E-mail

General

Target

98581d25200a1b2532cfd763ae2c6f1d
Size

167KB
MD5

98581d25200a1b2532cfd763ae2c6f1d
SHA1

f46c3ce25707fe5f9a4c32db2c64147f61f3fdbb
SHA256

7c893523dbc47e9a49d2c6535875601ce62ebc739dabc1d045ab4d0fcc17293e
SHA512

596aeb8c2bc9e0c1b0e6e3f1b43427b6d3f55cc7f209978510ac8156302f994b8056e4eab1c770e3f409c3840fb29a9b7c22c5763419f9dd1e5e09cad8bb5031
SSDEEP

3072:n7IdezFt/87BLpbl1c/B38sLxM1YGHkAte5sL91IS19M6pRIJRtajjz0RXkuS:n77zFV8dt5A38Am7L91ISndpR8v+z0RU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98581d25200a1b2532cfd763ae2c6f1d

Files

98581d25200a1b2532cfd763ae2c6f1d
.exe windows:5 windows x86 arch:x86

a6a495b506114ced3b39f6b7ed32049f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetCancelObject

cryptui

CryptUIDlgViewCertificateW
CryptUIDlgSelectCertificateW

dsprop

FindSheet
ADsPropSetHwndWithTitle
ADsPropShowErrorDialog
ADsPropGetInitInfo
ADsPropCreateNotifyObj
ADsPropSetHwnd
ADsPropSendErrorMessage

shell32

ILFindLastID

credui

CredUIInitControls
CredUIParseUserNameW

msvcrt

_onexit
wcspbrk
isdigit
wcstoul
_wtoi
free
_initterm
_except_handler3
wcslen
_wcsicmp
wcscpy
swprintf
strchr
srand
wcstok
wcscmp
__dllonexit
wcsrchr
wcschr
wcsncat
isalnum
iswdigit
wcscat
__CxxFrameHandler
malloc
iswspace
_adjust_fdiv
rand
wcsncpy
swscanf
_wcsupr
_wtol
iswxdigit
_vsnwprintf
_wcsnicmp
vswprintf
printf
wcsstr
mbstowcs
memmove
_purecall
time

gdi32

CreateHatchBrush

kernel32

VirtualAlloc

shlwapi

PathIsUNCServerShareW
PathAppendW

ntdll

NtQuerySystemTime
RtlInitUnicodeString
RtlSubAuthorityCountSid
RtlIdentifierAuthoritySid
RtlSubAuthoritySid
RtlNtStatusToDosError

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a6a495b506114ced3b39f6b7ed32049f

Headers

DLL Characteristics

File Characteristics

Imports

ole32

cryptui

dsprop

shell32

credui

msvcrt

gdi32

kernel32

shlwapi

ntdll

Sections

.text Size: 512B - Virtual size: 396B

.rdata Size: 85KB - Virtual size: 85KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 28B

.rsrc Size: 51KB - Virtual size: 51KB

.data Size: 26KB - Virtual size: 3.5MB

.text
Size: 512B - Virtual size: 396B

.rdata
Size: 85KB - Virtual size: 85KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 28B

.rsrc
Size: 51KB - Virtual size: 51KB

.data
Size: 26KB - Virtual size: 3.5MB