ad7d2b88cdb175e89c68c6f552e8c79d

General

Target

ad7d2b88cdb175e89c68c6f552e8c79d
Size

18KB
MD5

ad7d2b88cdb175e89c68c6f552e8c79d
SHA1

d949d55d13368a88ebe5798b0912af9fc08c8221
SHA256

1223e466f8d2280408f3555f5d03f81ef0cb9cf0a52c1e6f3e74c24b1291184d
SHA512

67b4a3af2e7c4632cb05991efc90981fb9ed3db84ce2636373f4396dd0e10caec0d057de237da0e5a77d0fc254d34ab51be98409e2da28365836a837d667734a
SSDEEP

384:3FNQWa2qzvz5Dt6b4ge4rLYUQCx8VqWO18RMuFAWtftj:/B4b18mVqjudF9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad7d2b88cdb175e89c68c6f552e8c79d

Files

ad7d2b88cdb175e89c68c6f552e8c79d
.exe windows:4 windows x86 arch:x86

89271d312d3fc2b1c7650d71a152df0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA

kernel32

GetLogicalDrives
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetProcAddress
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
LoadLibraryA
GetDriveTypeA
LocalFree
MultiByteToWideChar
ReadFile
SetFilePointer
Sleep
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
GetDiskFreeSpaceA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
ExitProcess
CreateFileA
CopyFileA
CloseHandle
LocalAlloc
lstrlenA

wsock32

gethostbyname
gethostname

advapi32

RegSetValueExA
IsValidSid
GetUserNameA
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegQueryValueExA
LookupAccountNameA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

rasapi32

RasEnumEntriesA
RasGetEntryDialParamsA
RasGetEntryPropertiesA

oleaut32

SysAllocString
SysFreeString
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayAccessData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89271d312d3fc2b1c7650d71a152df0c

Headers

File Characteristics

Imports

user32

kernel32

wsock32

advapi32

shell32

ole32

rasapi32

oleaut32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 132KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 132KB