a43bd31bd7dd7da2fff85a2178e09266

General

Target

a43bd31bd7dd7da2fff85a2178e09266
Size

987KB
MD5

a43bd31bd7dd7da2fff85a2178e09266
SHA1

c9aa26185c255dc81abe5506edc79d766bfd1b53
SHA256

79eec7a1147871ba16dd8a67104ab7f3ca1b3ba6c7519513ab4d812cb21a035e
SHA512

09f1af5ccbd7a063fd9ff83f286c2bc53d261bbc7e2041220ee0a90b82dfc5ae91aaf35a56df0f7514e8b351b82912628a23a7899a4f1e065187ea28bea4c9d6
SSDEEP

24576:q/iFvPzZL81KJPymMDvLyilQmbpfamU5R1M54e6QhVL1mR7Mjtew:/i1KJX+m8QmbsN2n62hFjYw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a43bd31bd7dd7da2fff85a2178e09266

Files

a43bd31bd7dd7da2fff85a2178e09266
.exe windows:5 windows x86 arch:x86

c067094ca9a7ad7d3fa49ef8a46c37a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

tapi32

lineUncompleteCall
lineAccept

kernel32

SetUnhandledExceptionFilter
HeapFree
QueryPerformanceCounter
GetTickCount
Sleep
GetCurrentProcess
VerSetConditionMask
InterlockedExchange
GetLastError
TerminateProcess
MulDiv
GetProcessHeap
UnhandledExceptionFilter
HeapAlloc
InterlockedCompareExchange
GetStartupInfoW
GetModuleHandleA
GetSystemTimeAsFileTime
LocalFree
IsWow64Process
CloseHandle
GetCurrentThreadId
VerifyVersionInfoW
CreateMutexW
GetCurrentProcessId

oleacc

LresultFromObject
CreateStdAccessibleObject

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDeviceInterfaceW

ole32

CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
CoGetObject

comctl32

InitCommonControlsEx
PropertySheetW

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 276KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c067094ca9a7ad7d3fa49ef8a46c37a8

Headers

File Characteristics

Imports

tapi32

kernel32

oleacc

setupapi

ole32

comctl32

Sections

.text Size: 676KB - Virtual size: 676KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 276KB - Virtual size: 3.5MB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 676KB - Virtual size: 676KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 276KB - Virtual size: 3.5MB

.rsrc
Size: 32KB - Virtual size: 31KB