c2eeb9bf994c9e252cf0c0469fe5fb40

General

Target

c2eeb9bf994c9e252cf0c0469fe5fb40
Size

80KB
MD5

c2eeb9bf994c9e252cf0c0469fe5fb40
SHA1

c1ccba878a9282fbe4caf3320e4597dd73af400f
SHA256

9b8298fe9dd84f827605d0fe7388ce8f3f08dca995b63e4381dc6b0dcd383ddd
SHA512

6b2da19eb500877036516d90ff1f5132ca04b620626535a2355a3ae74e5143f809299875aaf7f71da09d096cdb6f95f2e83e7921811ec1bbaf2336b0e2278e4d
SSDEEP

1536:teWjf2DaKU7bmhSGrAsvOklUqB1QNnHNxG31:7qD0bmRrAsGSBQ031

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2eeb9bf994c9e252cf0c0469fe5fb40

Files

c2eeb9bf994c9e252cf0c0469fe5fb40
.exe windows:4 windows x86 arch:x86

3f44de3c2f90c9d188e3d9b88888ae2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameW
lstrcatW
SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetProcessHeap
GetShortPathNameW
GetProcAddress
GetModuleHandleW
ExitProcess
GetTickCount
DeleteFileW
CreateProcessW
ExpandEnvironmentStringsW
HeapAlloc
lstrcmpiW
lstrlenW
lstrcpyW
HeapFree
GetFileTime
SetFileTime
FindResourceW
LoadResource
CreateFileW
SizeofResource
WriteFile
CloseHandle
FreeResource
GetEnvironmentVariableW
Sleep
RtlUnwind

user32

wsprintfW

advapi32

RegOpenKeyExW
EnumServicesStatusW
QueryServiceConfigW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
ChangeServiceConfigW
ChangeServiceConfig2W
RegCloseKey
OpenSCManagerW
OpenServiceW
StartServiceW
CloseServiceHandle
CreateServiceW
RegCreateKeyExW

shell32

SHChangeNotify
ShellExecuteExW
ord680

shlwapi

StrStrW

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f44de3c2f90c9d188e3d9b88888ae2a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 60KB - Virtual size: 57KB

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 60KB - Virtual size: 57KB