c35ef668888bc82888d1af2a9195f88f

General

Target

c35ef668888bc82888d1af2a9195f88f
Size

35KB
MD5

c35ef668888bc82888d1af2a9195f88f
SHA1

74ee3e5d2ba6b69ebb79b8ec432006f49896df13
SHA256

a7e060ae3cfbb07da0ab2745f9d521a1b06c3e05e890d0fd2bf88998688ca97d
SHA512

ff27a5b91b4fea1339dc3de95fe6c8cbb2e5014101187c90f9806bf412946f503323f049cf0e16e1d003e1c24a398ff30ad9fc49f0231d5e22f68f507d9b755a
SSDEEP

768:5FkQlr8zvJUrAb8J7RbYrDOvSANYU0UoBnodz9pRU6iXPrW9a7GY4OOTJBk:T18gt0MS9U0UoBnodz9pRU6iXPrW9a7m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c35ef668888bc82888d1af2a9195f88f

Files

c35ef668888bc82888d1af2a9195f88f
.exe windows:4 windows x86 arch:x86

f51828b74b4ff4fb56b46dd7a772e76c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetLastError
GetProcAddress
FreeLibrary
CreateFileA
WaitForSingleObject
Sleep
CloseHandle
DeleteFileA
ExitThread
GetModuleFileNameA
lstrcpyA
lstrcatA
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
CreateThread
CreateProcessA
GetSystemDirectoryA
lstrlenA
lstrcmpA
WaitForMultipleObjects
ResetEvent
WaitForSingleObjectEx
WriteFileEx
SizeofResource
LoadResource
FindResourceA
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
SetFileAttributesW
LoadLibraryA
WinExec

user32

PeekMessageA
CreateWindowExA
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
TranslateMessage
wsprintfA

advapi32

RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA

ole32

CoInitialize
CoUninitialize

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f51828b74b4ff4fb56b46dd7a772e76c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 22KB - Virtual size: 22KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 22KB - Virtual size: 22KB