9a79156460240d7cfa47195cb66ead29

General

Target

9a79156460240d7cfa47195cb66ead29
Size

176KB
MD5

9a79156460240d7cfa47195cb66ead29
SHA1

1482bba431f4f61beb600f5675f1287b70965d2d
SHA256

f985867c908229fd08d2a51d178472e25897a9331444e741712e23bd37864090
SHA512

13568859e0dbd5db04e08cabc636347026659c90d9011d502fcffe96aed8a90f18976534086864b7eba4cc0e7052218f59ac3d835ec212f359453dab088fb253
SSDEEP

3072:yXmPY4YP9jeg0bHYvMEUur2ekXPi+qhcZADNYDM8eMsf0ViaCkj2RvuAZWBt:yXmPzYP9jeg0bHYvMT4xkKThcZAUeOiu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a79156460240d7cfa47195cb66ead29

Files

9a79156460240d7cfa47195cb66ead29
.exe windows:4 windows x86 arch:x86

3e694fabe46475eb359b154f23ee0875

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid
CoInitialize
CoCreateInstance

user32

wsprintfA

advapi32

CryptAcquireContextA
RegCloseKey
RegOpenKeyExA
OpenSCManagerA
CryptGenRandom
CryptReleaseContext
RegCreateKeyExA
CloseServiceHandle
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
RegSetValueExA

shlwapi

StrStrIA
SHSetValueA
SHGetValueA
SHEnumKeyExA
SHEnumValueA

rpcrt4

UuidToStringA

msvcrt

time
isalpha
isxdigit
ispunct
strncpy
rand
wcscpy
mbstowcs
sprintf
srand
atoi
strlen
strcat
strcpy
printf
wctomb
__mb_cur_max
isgraph
strerror
islower
isspace
??2@YAPAXI@Z
isalnum
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
memcmp
tolower
fopen
malloc
fclose
free
fwrite
memset
memcpy
isupper

imagehlp

ImageNtHeader

kernel32

WideCharToMultiByte
FindNextFileA
GetPrivateProfileStringA
GetFileAttributesA
FindFirstFileA
GetModuleHandleA
lstrlenA
GetFileAttributesExA
SetFileTime
GetSystemDirectoryA
GetLocalTime
GetVersionExA
ExitProcess
CreateFileA
CloseHandle
GetLastError
GetStartupInfoA
SleepEx

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3e694fabe46475eb359b154f23ee0875

Headers

File Characteristics

Imports

shell32

ole32

user32

advapi32

shlwapi

rpcrt4

msvcrt

imagehlp

kernel32

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 104KB - Virtual size: 102KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 104KB - Virtual size: 102KB