ab045ac73440c9c2f8b04fffc8b9e11c

General

Target

ab045ac73440c9c2f8b04fffc8b9e11c
Size

100KB
MD5

ab045ac73440c9c2f8b04fffc8b9e11c
SHA1

ec3aa78d8c573d655aae2c1726b7f5131e046cf7
SHA256

e7f0ae8ec70601795c029d1d09111dfe041f3fc890156e189b2ef785791208e5
SHA512

845ccd2ee1e26cc18b5cc3d0dec8bf2d8754c5340321fd4f94453e7e8e250af20c103ed564b1c8e92f75d65de08dd47625de0b226ab8217b786531a32e84253b
SSDEEP

1536:tKPm6KYAMSlmX+FnqHoCbl0WZ7mg1n+436b0KhEwR5ffD:tzplq+FnqHDbl0Wdmg1+43M0KhJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab045ac73440c9c2f8b04fffc8b9e11c

Files

ab045ac73440c9c2f8b04fffc8b9e11c
.exe windows:4 windows x86 arch:x86

d10f83a2245d6589155e6750d3892dba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesA
GetCurrentProcess
WinExec
SizeofResource
LockResource
WriteFile
FindResourceA
GetFileAttributesA
GetTempPathA
VirtualProtect
GetLocaleInfoA
SearchPathA
CreateFileA
GetFileTime
CloseHandle
SetFileTime
LoadLibraryA
GetProcAddress
GetLastError
LoadResource
FreeLibrary
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetSystemInfo

user32

wsprintfA

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyA
RegOverridePredefKey
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d10f83a2245d6589155e6750d3892dba

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 64KB - Virtual size: 62KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 64KB - Virtual size: 62KB