04ce77404a217f3ec6613b3c464db0587291b048e8a3439a86950fd5fe568d98 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04ce77404a217f3ec6613b3c464db0587291b048e8a3439a86950fd5fe568d98
Size

18KB
MD5

3302568eed87d151ad391b25ac77485c
SHA1

104b8e36af0b3121f98e91a43310d5ca84bc86ee
SHA256

04ce77404a217f3ec6613b3c464db0587291b048e8a3439a86950fd5fe568d98
SHA512

6f0f3f22326020a25f5316de5a59229dab28fab2d824a792be79d15a683f3b52dfbdee88d11ecafea6785ca9849616f4e98e70a7ad0289323ca4b7fb941520d8
SSDEEP

384:FaBzKTmYYpkiwCm+7fdTn4BQJUt6br0EwB+u2DiUJ4i0:8KSpwsV4OmYbkQu2DHJ4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04ce77404a217f3ec6613b3c464db0587291b048e8a3439a86950fd5fe568d98

Files

04ce77404a217f3ec6613b3c464db0587291b048e8a3439a86950fd5fe568d98
.dll windows:4 windows x86 arch:x86

ea7e87aaeb7ef74412af0d1b951e07eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteFile
GetTempPathA
GetLocalTime
TerminateThread
SetThreadPriority
CreateThread
GetModuleFileNameA
CreateProcessA
DebugBreakProcess
DuplicateHandle
CreateFileMappingA
CreateConsoleScreenBuffer
VirtualAlloc
VirtualFree
GetSystemDirectoryA
DeleteFileA
Sleep
CreateFileA
GetLastError
CloseHandle
LoadLibraryA
DisableThreadLibraryCalls
GetProcAddress

user32

GetDC
GetCursor

wininet

HttpQueryInfoA
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

gdi32

GetPixel
GetBkMode

advapi32

OpenSCManagerA
DeleteService
CloseServiceHandle
ControlService
OpenServiceA

msvcrt

memset
sprintf
strcat
strcpy
strrchr
memcpy
strlen
_except_handler3

Exports

Exports

DriverProc
modMessage
modmCallback

Sections

wW37
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ