a8356a297f96e59e3676cf73332bdb4525c01699af5156c53a92d1afb9e90e25

General

Target

a8356a297f96e59e3676cf73332bdb4525c01699af5156c53a92d1afb9e90e25
Size

49KB
MD5

97ef892208a7d186bc2f278a015798ed
SHA1

b27cb18944c349eee1bc90e7edc95413dc1ae4c5
SHA256

a8356a297f96e59e3676cf73332bdb4525c01699af5156c53a92d1afb9e90e25
SHA512

96ddc659f19a75245841347134e123995e5623c43530f8258aeb376d3d52c09a6d91dc8da75f883e8fedd75b6ee37b3a70c3402d0be9abe05edcda170af6eb92
SSDEEP

768:bJ8Oif09VQRJHI+4fGL5NnREq2Nbbbbo0bp:bqOyuQRJGGNi3bbbbFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8356a297f96e59e3676cf73332bdb4525c01699af5156c53a92d1afb9e90e25

Files

a8356a297f96e59e3676cf73332bdb4525c01699af5156c53a92d1afb9e90e25
.exe windows:5 windows x86 arch:x86

3738e90116b156995499c16c1a65ac76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

netapi32

DsAddressToSiteNamesA
DsAddressToSiteNamesExA
DsAddressToSiteNamesExW
DsAddressToSiteNamesW
DsDeregisterDnsHostRecordsW
DsEnumerateDomainTrustsA
DsEnumerateDomainTrustsW
DsGetDcCloseW
DsGetDcNameA

oleaut32

OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFile
OleLoadPictureFileEx

ntprint

PSetupFreeDrvField
PSetupFreeMem

regapi

RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA

msvcrt

fopen
fread

kernel32

OutputDebugStringW
IsDebuggerPresent
ExitProcess
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA

iashlpr

AllocateAttributes

sti

StiCreateInstance

msdart

??0CCritSec@@QAE@XZ
??0CDoubleList@@QAE@XZ

Sections

.text
Size: 7KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rSrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3738e90116b156995499c16c1a65ac76

Headers

File Characteristics

Imports

netapi32

oleaut32

ntprint

regapi

msvcrt

kernel32

iashlpr

sti

msdart

Sections

.text Size: 7KB - Virtual size: 4KB

.data Size: 11KB - Virtual size: 12KB

rSrc Size: 26KB - Virtual size: 26KB

.text
Size: 7KB - Virtual size: 4KB

.data
Size: 11KB - Virtual size: 12KB

rSrc
Size: 26KB - Virtual size: 26KB