aa14d49887f2bb6c5e9ce7c8c9c7edd4

General

Target

aa14d49887f2bb6c5e9ce7c8c9c7edd4
Size

32KB
MD5

aa14d49887f2bb6c5e9ce7c8c9c7edd4
SHA1

e9f0c84d3c969dcb3a1af7ebfe40f245f4899de6
SHA256

ba54756be96d683273ec3e6e31c4b4ea88ae1135544166a547749aafaee91326
SHA512

d5045fc75bcccf34ad20ff13563119795044c049f4a75436e4ad724b50115888e5f8449273551b56d13833a1226066c024b11330cc69cacee707ffddb2002121
SSDEEP

384:FGau5YSmjkvB58NhnGDdan2NmKecIKm5NEkH9CdLh8zWRQf3R:OGn/ydaE7ec7URZKQf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa14d49887f2bb6c5e9ce7c8c9c7edd4

Files

aa14d49887f2bb6c5e9ce7c8c9c7edd4
.exe windows:4 windows x86 arch:x86

61783cafc3718898089fff2abfb66c0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
ExitWindowsEx
LoadStringA
EnumWindows

rasapi32

RasEnumDevicesA
RasGetConnectStatusA
RasGetEntryPropertiesA
RasGetEntryDialParamsA
RasHangUpA
RasEnumConnectionsA
RasDialA
RasEnumEntriesA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA

wsock32

WSAStartup
gethostname
gethostbyname
inet_addr

wininet

FindCloseUrlCache
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA

msvcrt

fprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
rand
srand
time
atoi
strncpy
strcpy
strcmp
strlen
strstr
fclose
_stricmp
fopen
sscanf
memcpy
strcat
sprintf
fscanf
_findclose
_findfirst
exit
fputc
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr

kernel32

FindResourceA
LoadResource
SizeofResource
GetLocaleInfoA
GetModuleFileNameA
Sleep
CreateFileA
GetVersionExA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
LockResource
ExpandEnvironmentStringsA
WriteFile
CloseHandle

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61783cafc3718898089fff2abfb66c0c

Headers

File Characteristics

Imports

user32

rasapi32

advapi32

shell32

wsock32

wininet

msvcrt

kernel32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB