e4101807fd3bb0b1b3f96622c33aae85bed0255292043897ad1e5a5d4eee31fd

General

Target

e4101807fd3bb0b1b3f96622c33aae85bed0255292043897ad1e5a5d4eee31fd
Size

208KB
MD5

a0a86865f60bd6a115b0f0f97a9a0bbf
SHA1

9b54e803a37bead52d6a77bc2387dd496f6db598
SHA256

e4101807fd3bb0b1b3f96622c33aae85bed0255292043897ad1e5a5d4eee31fd
SHA512

110852242b44ca41f3389019fdbba920f003043e2d07d14447f42660cf7b02aa06d6dc866258cfd21b19e9abfe679e18a5da916989aa8678bffcabe32a6ea111
SSDEEP

3072:H3pRmF4qOF04PkWYmsMtiL76PerRhOs7dEMjIV89ozBzy0LymWqml9ViPzOdk5au:H32F4yssy/WtMMjIzBy4WqH6kh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4101807fd3bb0b1b3f96622c33aae85bed0255292043897ad1e5a5d4eee31fd

Files

e4101807fd3bb0b1b3f96622c33aae85bed0255292043897ad1e5a5d4eee31fd
.exe windows:4 windows x86 arch:x86

e8a99fc532414ae756ce08b45dd4f636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegReplaceKeyA
LsaRetrievePrivateData
RegRestoreKeyA
RegNotifyChangeKeyValue
RegLoadKeyA
ObjectOpenAuditAlarmA
GetOldestEventLogRecord
ObjectDeleteAuditAlarmA
RegQueryInfoKeyA
AccessCheck
LsaEnumerateAccountRights
LsaQueryInformationPolicy

kernel32

FlushViewOfFile
CreateMutexA
ClearCommBreak
GlobalSize
FatalExit
EnumCalendarInfoW
FindResourceW
CallNamedPipeA
CloseHandle
EnumDateFormatsA
GetModuleHandleA
GetStartupInfoA

msvcrt

_open
_controlfp
_exit
__p__fmode
__p__commode
_adjust_fdiv
__set_app_type
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_c_exit

user32

DdeQueryStringA
GetClipCursor
ToUnicodeEx
GetActiveWindow
BlockInput
GetClipboardFormatNameA
SubtractRect
EmptyClipboard
GetKeyboardLayout
DdeCreateDataHandle
DdeQueryNextServer
CharLowerA
GetDlgItemInt
GetForegroundWindow
IsClipboardFormatAvailable
SetKeyboardState
ChangeDisplaySettingsExA
GetKeyState
GetProcessWindowStation
GetOpenClipboardWindow
LoadStringA
OpenInputDesktop
CharPrevA
BeginDeferWindowPos
GetKBCodePage

version

GetFileVersionInfoW

rasapi32

RasGetEntryPropertiesA
RasEditPhonebookEntryW
RasGetConnectStatusW
RasSetEntryDialParamsA
RasDialW
RasDialA

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8a99fc532414ae756ce08b45dd4f636

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

version

rasapi32

Sections

.text Size: 24KB - Virtual size: 20KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 160KB - Virtual size: 3.0MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 24KB - Virtual size: 20KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 160KB - Virtual size: 3.0MB

.rsrc
Size: 12KB - Virtual size: 8KB