a323e4748582b4c3a97ce6380112173b

General

Target

a323e4748582b4c3a97ce6380112173b
Size

173KB
MD5

a323e4748582b4c3a97ce6380112173b
SHA1

4a4fa73cd6ca4836bdf12ae75121848ee9213349
SHA256

a86eb2d5c13ef55c36d1f6b5ac6aee628cab5d990335afed4b2c672c68ac8b83
SHA512

9e60a97e70e735bf6f47eb6a3d79d621c7bbd791a286652a04828ebc456ff8f3fc11f0b7915bfadec2a15426c5fcdbae6333a6ce73bfecd6c4bfcc5ac15b3e17
SSDEEP

3072:mOak3SnyiSHG/C474lk0nwnaKXJBpmmVRJ2zZBIP4xMN+g3Y:mW3SnyiH74a0waKZBlJiSE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a323e4748582b4c3a97ce6380112173b

Files

a323e4748582b4c3a97ce6380112173b
.exe windows:4 windows x86 arch:x86

e6c4f2881102dcd471505191ae226bec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetTickCount
Sleep
GetFileSize
LocalAlloc
AddAtomW
ReadFile
DeleteFileA
lstrlenA
VirtualAlloc
GetTempFileNameA
GetTempPathA
DisableThreadLibraryCalls
MultiByteToWideChar
CreateFileW
DeviceIoControl
QueryPerformanceCounter
GetSystemTime
GetLastError
GetCurrentProcessId
SetFileAttributesA
CloseHandle
DeleteCriticalSection
EnumResourceNamesA
ReleaseMutex
InterlockedDecrement
VirtualFree
GetVersionExA
CreateMutexA
LocalFree
GetSystemTimeAsFileTime
SetFilePointer
CopyFileA
GlobalLock
GetModuleFileNameA
CreateHardLinkW
WideCharToMultiByte
GlobalFree
CreateDirectoryA
GlobalUnlock
CreateFileA
GetModuleFileNameW
WaitForSingleObject
GetVolumeInformationA
InterlockedIncrement
InitializeCriticalSection
GetFileAttributesA
GetCurrentThreadId
FreeLibrary

lz32

LZClose
LZCopy
LZOpenFileA

advapi32

RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegCloseKey

Sections

.text
Size: 92KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6c4f2881102dcd471505191ae226bec

Headers

File Characteristics

Imports

setupapi

kernel32

lz32

advapi32

Sections

.text Size: 92KB - Virtual size: 235KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 77KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 235KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 77KB

.rsrc
Size: 512B - Virtual size: 4KB