ad151dc3df23ea50cbfa405b31d27cc7

General

Target

ad151dc3df23ea50cbfa405b31d27cc7
Size

55KB
MD5

ad151dc3df23ea50cbfa405b31d27cc7
SHA1

eb94d2d1b4080098ae3f1210dc938c22602ffe41
SHA256

f464ee4ee2f386e804f9ddf63b7bdf14f7736c2af8fda6820dd7fe4b23c82783
SHA512

599111085b06b17ab47403ad10a37632cb23aa4999f4283d46748f4a4889fb15e9e5c76e9893c09f4bd9e70d57d258e8ca0502d1b22a1dda689a921b477d5e15
SSDEEP

768:yEJqXmTMRRX9MSIteP7Rjfg+Hiz7wJWy7BTJHBni+VuHnYN5WOo6s2LQT+HR1mq:X0mIRV9MSrj/Uo3ni+gHnI5p1LQ21mq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad151dc3df23ea50cbfa405b31d27cc7

Files

ad151dc3df23ea50cbfa405b31d27cc7
.exe windows:5 windows x86 arch:x86

5aaf7c8f4899407ab3426cbf17e03347

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoResumeClassObjects
CoEnableCallCancellation
UtConvertDvtd16toDvtd32
RevokeDragDrop
CoInitializeWOW
CoRegisterSurrogate

gdi32

StrokeAndFillPath
CreateDiscardableBitmap
CLIPOBJ_cEnumStart
GetGlyphIndicesW
UnrealizeObject

msvcrt

wcsncmp
_gcvt
_itoa
_mbslen
_Getmonths
_adj_fdiv_m16i
memcmp
log
modf
fmod

advapi32

LsaQueryTrustedDomainInfo
OpenSCManagerW
EncryptionDisable
AllocateLocallyUniqueId
LogonUserW
EnumDependentServicesW
RegNotifyChangeKeyValue
GetSecurityInfo
DecryptFileA

kernel32

EnumDateFormatsExA
CreateHardLinkW
MoveFileA
GetCommandLineA
GetPrivateProfileStructA
OpenJobObjectA
TlsFree
RemoveDirectoryW
GetStartupInfoA
GetNumberOfConsoleFonts
GetLocaleInfoW
GetModuleHandleA
GetBinaryTypeA
GetConsoleKeyboardLayoutNameW
SetSystemTime

user32

FrameRect
DeregisterShellHookWindow
SetUserObjectInformationW
DefFrameProcA
GetDoubleClickTime
MessageBoxIndirectW
SetMenuInfo
DefWindowProcA

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5aaf7c8f4899407ab3426cbf17e03347

Headers

DLL Characteristics

File Characteristics

Imports

ole32

gdi32

msvcrt

advapi32

kernel32

user32

Sections

.text Size: 51KB - Virtual size: 51KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 85KB

.text
Size: 51KB - Virtual size: 51KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 85KB