af404db6443c93e1c35bb2846b1d016d2a1f73c3880ea7a76d4af562663cb231

General

Target

af404db6443c93e1c35bb2846b1d016d2a1f73c3880ea7a76d4af562663cb231
Size

92KB
MD5

d45ebf03bf72e79d42fa381a7f2f8f6e
SHA1

465f91b3a2cac2623c5881b1f184bd5be8ec6770
SHA256

af404db6443c93e1c35bb2846b1d016d2a1f73c3880ea7a76d4af562663cb231
SHA512

abc118eb68b23d5540fae7051025925faad8f4ceb1e98b32be23fea6f9a1ca4c730822a865ccb61c30166f15854369942e4827200b3cc6d4cdf403941d7ce166
SSDEEP

768:jZbUlt7hF09xXCRBewPk1wkhItzDMAb/HcqoyOzdW2NpsHZBzQrVg+nb37GbF9DJ:j6tPMEz4FL7zdW27yHQV3ybF9DoNi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af404db6443c93e1c35bb2846b1d016d2a1f73c3880ea7a76d4af562663cb231

Files

af404db6443c93e1c35bb2846b1d016d2a1f73c3880ea7a76d4af562663cb231
.exe windows:4 windows x86 arch:x86

adfa19b862375e0b8e2c10d5ed863eb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
WinExec
GetLastError
Beep
WaitForSingleObject
FindResourceA
SetEvent
LeaveCriticalSection
EnterCriticalSection
LoadResource
LockResource
SizeofResource
CreateFileA
WriteFile
CloseHandle
InitializeCriticalSection
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
SetCurrentDirectoryA
CreateEventA

advapi32

SetServiceStatus
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CloseServiceHandle
CreateServiceA
OpenServiceA
StartServiceA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

mfc42

ord535
ord537
ord540
ord1575
ord924
ord800

msvcrt

_exit
_XcptFilter
__p___initenv
_onexit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
__CxxFrameHandler
_stricmp
exit
__getmainargs

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adfa19b862375e0b8e2c10d5ed863eb8

Headers

File Characteristics

Imports

kernel32

advapi32

mfc42

msvcrt

msvcp60

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 448B

.rsrc Size: 85KB - Virtual size: 85KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 448B

.rsrc
Size: 85KB - Virtual size: 85KB