c30c53514f914717ff20643394614c05

General

Target

c30c53514f914717ff20643394614c05
Size

271KB
MD5

c30c53514f914717ff20643394614c05
SHA1

b248d66ff8b3d9dc49b633d0b8df5c7f84f18e4d
SHA256

b617ae116756fd3c366d928dec3071e63dad0f8af809b59c35b6fa456de0007c
SHA512

de6a3a79371242ab60dcb04540e2017375e8a3dd5770e9bfa74d92d55033149b6818a1a7a5783cf40f5a719c1d62c1c97850bf08123561cca3f869a6751de3de
SSDEEP

6144:Rp0a0PDGg2MN7Sw4+IF9vRwkxwmA4yCjqr8/EDFUqAnKTm0KxQnc:XCKeNGw4+u9JwnmXyxrRzm0Fn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c30c53514f914717ff20643394614c05

Files

c30c53514f914717ff20643394614c05
.exe windows:4 windows x86 arch:x86

cdbad053a7696ccd3975638833f9b282

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ConnectNamedPipe
CreateFileA
CreateMailslotW
CreateSocketHandle
EnumSystemLocalesW
EscapeCommFunction
ExitProcess
GetFileType
Process32Next
ReadConsoleOutputW
SetCommTimeouts
WriteFile
lstrcat
lstrcatA

advapi32

BackupEventLogA
BuildImpersonateExplicitAccessWithNameW
CryptReleaseContext
EnumDependentServicesW
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
IsValidSid
ObjectCloseAuditAlarmW
OpenBackupEventLogA
RegEnumValueW
RegLoadKeyW
RegNotifyChangeKeyValue
RegSaveKeyW
SetServiceBits

user32

DefDlgProcA
DrawTextA
GetAncestor
GetComboBoxInfo
GetDCEx
GetInternalWindowPos
IsDlgButtonChecked
SetDlgItemInt
SystemParametersInfoA

gdi32

CopyMetaFileA
CreateBitmapIndirect
CreateCompatibleBitmap
DescribePixelFormat
FillRgn
GetBoundsRect
GetEnhMetaFileW
GetKerningPairs
GetKerningPairsA
GetMetaFileBitsEx
GetNearestColor
GetOutlineTextMetricsW
MaskBlt
StartDocA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdbad053a7696ccd3975638833f9b282

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 4KB

.data Size: 266KB - Virtual size: 268KB

.rsrc Size: 2KB - Virtual size: 528KB

.text
Size: 512B - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 4KB

.data
Size: 266KB - Virtual size: 268KB

.rsrc
Size: 2KB - Virtual size: 528KB