0334c0e8c94dd92cb92df01e87f755fd31f4f6d82263c900d56d477080a87b26

Sharing

Copy URL Twitter E-mail

General

Target

0334c0e8c94dd92cb92df01e87f755fd31f4f6d82263c900d56d477080a87b26
Size

12KB
MD5

43431beabf658cd1f777da776b906f2b
SHA1

645e953c78d42c37ec4ba58d9a34e7cd581c7eac
SHA256

0334c0e8c94dd92cb92df01e87f755fd31f4f6d82263c900d56d477080a87b26
SHA512

29529aa623478ac97b298867377028cbee1f5e396e2a2c0e97aad04be188bd12d4a43cd0df2d4642fbddcf7c598075770c3e018458d689fbcde95fd8b01f6406
SSDEEP

192:AqSXC8ighBUawRSbP7gUx30WjoN4aDdmPvvAbRQhbjpBnMbDAVlDRh:AqSXyJg6g24aDdYv4S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0334c0e8c94dd92cb92df01e87f755fd31f4f6d82263c900d56d477080a87b26

Files

0334c0e8c94dd92cb92df01e87f755fd31f4f6d82263c900d56d477080a87b26
.exe windows:4 windows x86 arch:x86

078d76a4fbe16f81a203bc0ac8abd1ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetTempFileNameA
GetTempPathA
CloseHandle
GetFileSize
WriteFile
CreateFileA
DeleteFileA
FreeLibrary
GetLastError
lstrcatA
WaitForSingleObject
CreateThread
CreateMutexA
GetVersionExA
lstrcmpiA
SetFileAttributesA
WinExec
GetTickCount
ReadFile
SetFilePointer
CopyFileA
LoadLibraryA
GetProcAddress
GetCurrentProcess
Sleep
OutputDebugStringA

user32

GetWindowLongA
FindWindowA
wsprintfA
ShowWindow

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges

wininet

DeleteUrlCacheEntry

msvcp60

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z

shell32

ShellExecuteA

msvcrt

_itoa
__CxxFrameHandler
atoi
fread
fclose
fwrite
_except_handler3
__dllonexit
_onexit
fopen
time
localtime
strlen
memcpy
memset
malloc
strchr
strcpy
sprintf
strcat

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

078d76a4fbe16f81a203bc0ac8abd1ef

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

msvcp60

shell32

msvcrt

Sections

.text Size: 11KB - Virtual size: 10KB

.CRT Size: 512B - Virtual size: 8B

.text
Size: 11KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 8B