dff5cf070e7d1741cd0dcae9db400184

General

Target

dff5cf070e7d1741cd0dcae9db400184
Size

24KB
MD5

dff5cf070e7d1741cd0dcae9db400184
SHA1

2e8df474c17ed2d7aa1949be1302d9141c3c5a50
SHA256

9395797e318d30899c4cfdc9a0d784d3aa4410c2675bf7c308ea9e31b8b1b489
SHA512

5484bc71622b47f98ebe2e363ee8e0273c50e75b27ab3f459668ee95471637f5c620762f732366a7f06bb45c3c43765b09412c1aa0e0276a31583a7fce392c8b
SSDEEP

384:uwvIuQKX1MYZgMfTMBNcVmbplg63oPrDeMvQw3lYJlI:3I7KX1d5QXG3rDe6QnJe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dff5cf070e7d1741cd0dcae9db400184

Files

dff5cf070e7d1741cd0dcae9db400184
.exe windows:5 windows x86 arch:x86

ee15dc77920b00b4eb0aede59332a070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaSetTrustedDomainInformation
AdjustTokenPrivileges
GetSecurityDescriptorSacl
RegOpenKeyExW
CryptDecrypt
EqualDomainSid
LsaQueryTrustedDomainInfo
AccessCheck
CryptGetProvParam

user32

PrivateExtractIconExW
IsCharAlphaNumericA
RemoveMenu
CheckRadioButton
EnumDisplaySettingsExW
DestroyAcceleratorTable
ExitWindowsEx
GetCursorPos

gdi32

GdiPlayJournal
GetOutlineTextMetricsW
BRUSHOBJ_pvAllocRbrush
FillPath
GetOutlineTextMetricsA

ole32

CoGetCallContext
OleCreateEmbeddingHelper
CreateClassMoniker
CoSetProxyBlanket
MkParseDisplayName
OleCreateFromDataEx

kernel32

GetProcessShutdownParameters
ExitVDM
HeapQueryTagW
GetModuleHandleA
SetCommBreak
GetStartupInfoA
ValidateLCType
GetProcessHeap
GetCommandLineA
VirtualAllocEx
GetDiskFreeSpaceExA
DefineDosDeviceA
WritePrivateProfileStructW
GetFullPathNameA
FatalAppExitW

msvcrt

_c_exit
_fputwchar
ctime
wctomb
_wtol
_fpieee_flt
putwchar
freopen
_wgetcwd
_ismbckata

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee15dc77920b00b4eb0aede59332a070

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

user32

gdi32

ole32

kernel32

msvcrt

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 988B

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 988B