e10a979daefe63ff1bb2399e2be6ba2d

Sharing

Copy URL Twitter E-mail

General

Target

e10a979daefe63ff1bb2399e2be6ba2d
Size

32KB
MD5

e10a979daefe63ff1bb2399e2be6ba2d
SHA1

ef765f3fe9de219d4cd1d1b217e05be59a8f1d9c
SHA256

7770724f6d323e84ae7d07573e4d8e1c485a9e10adf1c123c5235bcd751b18a7
SHA512

4381f55f967d4eceac9c9fb391fe863c9e16bf84801e743e6635c0eca28c844acabf9e4c23d3701453faffa8252b51f200f9ffcd60cb44061b849e432365d4ac
SSDEEP

384:im8fs1ON4mtsmgerhx178hRrHfcpPzgOI/hIj23+gvZPjbJ:ip01kdtpgerhT78XrHfcpPEZ3+UZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e10a979daefe63ff1bb2399e2be6ba2d

Files

e10a979daefe63ff1bb2399e2be6ba2d
.dll windows:4 windows x86 arch:x86

057ded2ad2a392a1c90f4c3d2a610bdb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LockResource
LoadResource
FindResourceA
CreateMutexA
Sleep
SetFileTime
GetFileTime
SetFileAttributesA
GetCurrentProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
GetProcAddress
lstrcpyA
lstrcatA
lstrcpynA
lstrlenA
IsBadReadPtr
GetFileSize
HeapAlloc
GetProcessHeap
VirtualProtect
FreeResource
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
GetModuleHandleA
WriteProcessMemory
VirtualAllocEx
Module32Next
Module32First
LoadLibraryA
GetSystemDirectoryA
GetTempFileNameA
MoveFileA
GetTempPathA
GetFileAttributesA
CreateFileA
GetTickCount
WriteFile
CloseHandle
ReadFile
SetFilePointer
DeleteFileA
GetModuleFileNameA
CreateThread

user32

wvsprintfA
GetWindowLongA
wsprintfA
FindWindowA
GetWindowThreadProcessId
GetWindowTextA
GetWindow
GetClassNameA

advapi32

LookupPrivilegeValueA
OpenProcessToken
CreateServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
StartServiceA
QueryServiceStatus
DeleteService
ControlService
AdjustTokenPrivileges

msvcrt

_strcmpi
_stricmp
_adjust_fdiv
_initterm
_except_handler3
malloc
strstr
strchr
strncpy
atoi
strrchr
free
sprintf

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

057ded2ad2a392a1c90f4c3d2a610bdb

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 6KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 6KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 2KB