d73e3485c8e3dd1a847d78f796be9517

Sharing

Copy URL Twitter E-mail

General

Target

d73e3485c8e3dd1a847d78f796be9517
Size

799KB
MD5

d73e3485c8e3dd1a847d78f796be9517
SHA1

55f0b62c91041fc87d844188e23882e56e52191b
SHA256

54b1b9f43fcfbbfef9d5adcb0a9cb8329f5cc7410db67dcd10cad52d0d91ac33
SHA512

037269c57c222850b2ed139908535562f15d34fc6145c1f9d6001034c7856a5141554ddf1355f58d809a5d2621650b94085bd68aa7453a128df55846f914b3f4
SSDEEP

24576:cdvHA0ie7qEu1vxU52oJFGeNkybjd+KeeFj:cdvAHTECvxstF9h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d73e3485c8e3dd1a847d78f796be9517

Files

d73e3485c8e3dd1a847d78f796be9517
.exe windows:5 windows x86 arch:x86

b1c9f931a5a7c0f4262ff49e8b8a4e32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

input

CPlApplet

kernel32

GetCurrencyFormatW
GetCurrentThread
QueryPerformanceCounter
GetSystemDefaultLangID
OpenEventW
LeaveCriticalSection
GetBinaryTypeA
FreeResource
Module32First
WritePrivateProfileStringW
UnmapViewOfFile
HeapSize
SetTapeParameters
GlobalDeleteAtom
GetEnvironmentStringsA
NlsGetCacheUpdateCount
WritePrivateProfileStructW
TransmitCommChar
VirtualAlloc
SetConsoleInputExeNameA
GetPrivateProfileStructW
LoadLibraryA
UpdateResourceW
OutputDebugStringW
GetStartupInfoA
GetConsoleHardwareState
GetNumaHighestNodeNumber
GetVolumePathNamesForVolumeNameA

ntprint

PSetupCreateDrvSetupPage
PSetupSelectDeviceButtons
PSetupIsCompatibleDriver
PSetupSetSelectDevTitleAndInstructions
PSetupGetPathToSearch
PSetupCreatePrinterDeviceInfoList
PSetupInstallICMProfiles
PSetupDestroyMonitorInfo
PSetupShowBlockedDriverUI
PSetupEnumMonitor
PSetupAssociateICMProfiles
ClassInstall32
PSetupDestroyPrinterDeviceInfoList
PSetupInstallPrinterDriver
PSetupDestroySelectedDriverInfo
PSetupPreSelectDriver
PSetupBuildDriversFromPath
PSetupIsTheDriverFoundInInfInstalled
PSetupFreeMem
PSetupFreeDrvField
PSetupSelectDriver
PSetupIsDriverInstalled

wintrust

WintrustRemoveActionID
WinVerifyTrust
WVTAsn1SpcSigInfoEncode
WVTAsn1SpcLinkEncode
WTHelperGetProvPrivateDataFromChain
WVTAsn1CatNameValueEncode
MsCatConstructHashTag
CryptCATOpen
mssip32DllRegisterServer
WintrustGetRegPolicyFlags
SoftpubCheckCert
CryptCATHandleFromStore
WVTAsn1SpcSpOpusInfoDecode
CryptCATEnumerateCatAttr
WTHelperGetFileName
CryptCATCDFEnumMembersByCDFTagEx
WVTAsn1CatMemberInfoEncode
CryptCATCDFEnumMembersByCDFTag
CryptCATGetCatAttrInfo
WVTAsn1SpcFinancialCriteriaInfoDecode
CryptSIPPutSignedDataMsg
CryptCATAdminEnumCatalogFromHash
CryptSIPGetInfo
CryptSIPGetRegWorkingFlags

user32

CreateDialogParamA
ChangeDisplaySettingsExW
SendDlgItemMessageW
GetUserObjectSecurity
EnumDisplayMonitors
DrawFrame
GetCursorFrameInfo
GetMenuState
PeekMessageW
CloseWindowStation
GetKeyboardLayoutNameA
IsIconic
IsCharAlphaNumericW
UnhookWindowsHookEx
ShowScrollBar
MonitorFromRect
SetActiveWindow
BeginPaint
HiliteMenuItem

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 362KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1c9f931a5a7c0f4262ff49e8b8a4e32

Headers

DLL Characteristics

File Characteristics

Imports

input

kernel32

ntprint

wintrust

user32

Sections

.text Size: 189KB - Virtual size: 188KB

.rdata Size: 244KB - Virtual size: 244KB

.data Size: 362KB - Virtual size: 1.6MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 189KB - Virtual size: 188KB

.rdata
Size: 244KB - Virtual size: 244KB

.data
Size: 362KB - Virtual size: 1.6MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB