50d2ac6ae3f16878e5789c95d81d4421cd9deb82c289c55e73bf95ef525fabf8

General

Target

50d2ac6ae3f16878e5789c95d81d4421cd9deb82c289c55e73bf95ef525fabf8
Size

96KB
MD5

6a0f6af3fa97191bca53630f480abf66
SHA1

c03630197ae3be1d1722bb56f0e3ddbf27614917
SHA256

50d2ac6ae3f16878e5789c95d81d4421cd9deb82c289c55e73bf95ef525fabf8
SHA512

062e076ea1269ca74f4b2162a23d20624b8e2e2de8168a6a1a92ec7310be5fe54028625bc2c865880d47e76f505489d43dc1f20b287900cecec23875a8f41434
SSDEEP

1536:boQRthyfPU6Ni3bbbbEYjgZdtb3zawb+9GjfxWqihU9I/9A:bbRt8fP9WjgZdtqLhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
50d2ac6ae3f16878e5789c95d81d4421cd9deb82c289c55e73bf95ef525fabf8

Files

50d2ac6ae3f16878e5789c95d81d4421cd9deb82c289c55e73bf95ef525fabf8
.exe windows:5 windows x86 arch:x86

c95f69ea33142e6aac817e4d2ecc4e9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

DsAddressToSiteNamesA
DsAddressToSiteNamesExA
DsAddressToSiteNamesExW
DsAddressToSiteNamesW
DsDeregisterDnsHostRecordsW
DsEnumerateDomainTrustsA
DsEnumerateDomainTrustsW
DsGetDcCloseW
DsGetDcNameA

oleaut32

OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFile
OleLoadPictureFileEx

ntprint

PSetupFreeDrvField
PSetupFreeMem

regapi

RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA

msvcrt

fopen
fread

kernel32

OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA

iashlpr

AllocateAttributes

sti

StiCreateInstance

msdart

??0CCritSec@@QAE@XZ
??0CDoubleList@@QAE@XZ

Sections

.text
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c95f69ea33142e6aac817e4d2ecc4e9c

Headers

File Characteristics

Imports

netapi32

oleaut32

ntprint

regapi

msvcrt

kernel32

iashlpr

sti

msdart

Sections

.text Size: 7KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 12KB

rsrc Size: 26KB - Virtual size: 26KB

.text
Size: 7KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 12KB

rsrc
Size: 26KB - Virtual size: 26KB