14802cba13b41f7645d693f55057a6b2dff8b8b8257b033945238b1874d4e112

General

Target

14802cba13b41f7645d693f55057a6b2dff8b8b8257b033945238b1874d4e112
Size

52KB
MD5

8bd5ef5412bff624d8147e09979674a5
SHA1

180b640b40dacd55681a1e28ecebd026aee4a422
SHA256

14802cba13b41f7645d693f55057a6b2dff8b8b8257b033945238b1874d4e112
SHA512

a6f3c0a4a07fec2b2ff75a2f0ca7433f4c36b079ceec2cc45b67e45e844385939239eb9d99d078511f4987be03c1db7f1a474c5e7710933db7834670ccf12d64
SSDEEP

768:6rIyoTDb03AuTFhME5I+5vgJizuFlczN:3V+fxi+5vOxCh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14802cba13b41f7645d693f55057a6b2dff8b8b8257b033945238b1874d4e112

Files

14802cba13b41f7645d693f55057a6b2dff8b8b8257b033945238b1874d4e112
.exe windows:5 windows x86 arch:x86

0b4c0d5d23772f638992f0a8431db23f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA

kernel32

CompareStringA
lstrlenA
lstrcatA
lstrcpyA
lstrcmpA
WriteProfileStringA
GetProfileStringA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
FreeLibrary
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
WritePrivateProfileStringA
lstrcmpiA
GetPrivateProfileStringA
SetLastError
GetCommandLineA
GetSystemInfo
GetVersionExA
DeleteFileA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapFree
HeapAlloc
VirtualAlloc
GetSystemDirectoryA

user32

GetDesktopWindow
LoadStringA

shell32

SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b4c0d5d23772f638992f0a8431db23f

Headers

File Characteristics

Imports

advapi32

kernel32

user32

shell32

ole32

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 12KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 12KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 4KB