d5f7306a7e2d98b83e609ab65f0dc04dff0916de4bd472a91f5e1d8128c434e5

General

Target

d5f7306a7e2d98b83e609ab65f0dc04dff0916de4bd472a91f5e1d8128c434e5
Size

299KB
MD5

123b4877681f68c753d2ae6a4bb88010
SHA1

090eaf3ae20a6b8270b4c1c430ea00d14d23554e
SHA256

d5f7306a7e2d98b83e609ab65f0dc04dff0916de4bd472a91f5e1d8128c434e5
SHA512

4d8a860a94582565d754f91c66eec5cf06fcb04c552b35990afbe8f9d01fe01e3ce861a11f603310ac55ac9cbaf43b60185bc07f920cfdc7c6b9b157e1c185d3
SSDEEP

6144:M5F6/BuzrDXP3PHBfP3HLp3PHrR3njkMX0d0zDisE8y1Utmm9P0emHpzqQPEmKW7:y65uzrD/3PHBfP3HLp3PHrVYMX0a1EHz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5f7306a7e2d98b83e609ab65f0dc04dff0916de4bd472a91f5e1d8128c434e5

Files

d5f7306a7e2d98b83e609ab65f0dc04dff0916de4bd472a91f5e1d8128c434e5
.exe windows:4 windows x86 arch:x86

b52f6d6dc99fffd7ee135c51adf2264d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeviceIoControl
CreateEventW
InterlockedDecrement
HeapCreate
SetConsoleTitleW
FindResourceA
Heap32First
ReadConsoleA
GetPrivateProfileIntA
LoadLibraryA
GetModuleHandleA
ReadFileEx
GetDiskFreeSpaceA
CloseHandle
GetStringTypeW
lstrcpyW
lstrcatW
SetEnvironmentVariableA
Heap32Next
GetDiskFreeSpaceA
GetLastError

adsldpc

ADsEnumClasses
ADsCloseSearchHandle
ADsDeleteDSObject
ADsCreateDSObject

shell32

DragQueryFileA
DllUnregisterServer
SHGetSettings
ShellAboutA
SHGetMalloc
ExtractIconA
DragFinish
StrChrA
SHFree
ShellMessageBoxW
DuplicateIcon
SHGetDiskFreeSpaceA
DragAcceptFiles

uxtheme

SetWindowTheme

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b52f6d6dc99fffd7ee135c51adf2264d

Headers

File Characteristics

Imports

kernel32

adsldpc

shell32

uxtheme

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 272B

.rich Size: 1KB - Virtual size: 176B

.data1 Size: 512B - Virtual size: 74B

.rsrc Size: 291KB - Virtual size: 291KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 272B

.rich
Size: 1KB - Virtual size: 176B

.data1
Size: 512B - Virtual size: 74B

.rsrc
Size: 291KB - Virtual size: 291KB