a3933add975d6204580c433a2e963fed

General

Target

a3933add975d6204580c433a2e963fed
Size

30KB
MD5

a3933add975d6204580c433a2e963fed
SHA1

37dec41fe86a82e4720c3baa665de16ce9015aff
SHA256

c7b611277b251b4479d3624d64c4c40b5412d1b9eec6bb3f4f74474feb5da5ba
SHA512

8d1cb212cfd0f252455d0c4579756bf0c7f19ad7b6c573f433c531d4ecd566a5515d25b5108849849d01c6646be76c642e37bf8d2ea752bfc52820dba9c2310f
SSDEEP

384:ff4NYcB2QLyKOKAIayDwBMIJn5PSXMJzvoVRKwKeoeJ5gJlRZwpatA/XU:KBSKzVSMmn5PS6zvoXK4T5AlRCKAv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3933add975d6204580c433a2e963fed

Files

a3933add975d6204580c433a2e963fed
.exe windows:4 windows x86 arch:x86

3562ed57485d811ff6f42ff3f9a22405

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
DeleteFileA
CloseHandle
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetLastError
ExitThread
lstrcatA
CreateEventA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
GetModuleHandleA
GetCommandLineA
lstrlenA
SetEvent
GetFileAttributesA
CreateProcessA
SetFileAttributesA
FindClose
ResetEvent
FindNextFileA
CreateThread
FindResourceA
LoadResource
WaitForSingleObjectEx
WriteFileEx
Process32First
CompareStringA
lstrcmpA
WaitForMultipleObjects
WaitForSingleObject
FreeLibrary
ExitProcess
CreateFileA
RtlUnwind

user32

PeekMessageA
DestroyWindow
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
ShowWindow
CreateWindowExA
wsprintfA

advapi32

RegSetValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegNotifyChangeKeyValue

ole32

CoInitialize
CoUninitialize

shell32

SHGetFolderPathA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3562ed57485d811ff6f42ff3f9a22405

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 816B

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 816B

.rsrc
Size: 18KB - Virtual size: 18KB