96f1295f4ed9a588eb312232138170b0be63b513b88eae3016a0b326fa836a6e

Sharing

Copy URL Twitter E-mail

General

Target

96f1295f4ed9a588eb312232138170b0be63b513b88eae3016a0b326fa836a6e
Size

499KB
MD5

47567e36547fbd30b3b634313939c0b6
SHA1

704b705c742ca46e2bc4b78805642d3b7fa18722
SHA256

96f1295f4ed9a588eb312232138170b0be63b513b88eae3016a0b326fa836a6e
SHA512

9eb1db98cedf05e1a76f51013881aff772d3b5091593a7ab64635fdf029f57e3f59372b253bb80193be4a3a38260a7f8f3c707f03b680766b2738c61fe00df5a
SSDEEP

12288:smYrKaeViZ4vK+i0HykG32nVEO3LlvGUqHOHTznugUZl/mbs:piqK+bykG32nuMGUAOHnVAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f1295f4ed9a588eb312232138170b0be63b513b88eae3016a0b326fa836a6e

Files

96f1295f4ed9a588eb312232138170b0be63b513b88eae3016a0b326fa836a6e
.exe windows:5 windows x86 arch:x86

5904630d4234b0e82e44508adb8ba4d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\zhanlue\2345uninst\bin\Win32\Release\pdb\2345Uninst.pdb

Imports

kernel32

FindFirstFileW
GetLongPathNameW
CreateFileW
GetFileAttributesExW
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetCurrentProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
LoadLibraryW
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FindNextFileW
FindClose
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
GetFileSize
FormatMessageW
LocalFree
CreateDirectoryW
GetFullPathNameW
lstrlenW
RemoveDirectoryW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
MoveFileExW
MoveFileW
HeapFree
GetCurrentThreadId
HeapAlloc
GetProcessHeap
QueryDosDeviceW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
GetLastError
GetLogicalDriveStringsW
GetACP
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
LoadLibraryA
lstrcatW
lstrcpyW
GetFileSizeEx
CreateProcessW
GetExitCodeProcess
LoadLibraryExW
GetEnvironmentVariableW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
Sleep
SearchPathW
lstrcmpiW
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
LockResource
GetVersionExW
SetErrorMode
CloseHandle
GetPrivateProfileStringW
LCMapStringW
GetFileType
GetStringTypeW
GetStdHandle
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
SetLastError

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenCurrentUser
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
CommandLineToArgvW

ole32

CoTaskMemFree

imm32

ImmDisableIME

shlwapi

SHDeleteKeyW

Exports

Exports

CheckSigner

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5904630d4234b0e82e44508adb8ba4d6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

shell32

ole32

imm32

shlwapi

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 103KB - Virtual size: 102KB

.reloc Size: 79KB - Virtual size: 80KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 103KB - Virtual size: 102KB

.reloc
Size: 79KB - Virtual size: 80KB