86108d0b91cf1246ff5d38a46a27f9787dba48877eccbcef85771717a7adfa9b

General

Target

86108d0b91cf1246ff5d38a46a27f9787dba48877eccbcef85771717a7adfa9b
Size

264KB
MD5

3953a2007947c78a50a3c1e88aba72a9
SHA1

9f590873e32ca7c8358b1e74e14ba3ad39da579a
SHA256

86108d0b91cf1246ff5d38a46a27f9787dba48877eccbcef85771717a7adfa9b
SHA512

cd9fc078022ece9cfc622ec713cb41a1140f6d2f321cade859d1d30cbfef893890bd9e9d64fd5402e5f88162f8ce45c44cda3035e42eaa527d9097ca62a7f50a
SSDEEP

6144:kIaN0crfSqcNqxhaFtdb55SDb05WqOocQy:kB1paFtRKDb00/LQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86108d0b91cf1246ff5d38a46a27f9787dba48877eccbcef85771717a7adfa9b

Files

86108d0b91cf1246ff5d38a46a27f9787dba48877eccbcef85771717a7adfa9b
.exe windows:5 windows x86 arch:x86

aed4415f47b34cb5ca4a58aa6ad85425

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

resutils

ResUtilDupString
ResUtilGetBinaryValue

kernel32

LoadLibraryA
GetProfileStringW
GetStringTypeW
RemoveDirectoryW
lstrlenW
LocalFileTimeToFileTime
GetVersionExA
FormatMessageA
WaitForSingleObject
GetModuleFileNameW
CreateFileMappingW
GetCurrencyFormatA
LoadLibraryW
GetCurrentDirectoryA
GetPrivateProfileStringA
GetProcAddress
IsBadReadPtr
HeapFree
CreateSemaphoreA
GetCommandLineA
GetTempPathA
SetCurrentDirectoryW
CopyFileA
CreateMutexW

mprapi

MprAdminConnectionEnum
MprInfoBlockAdd
MprAdminBufferFree
MprAdminDeviceEnum

user32

DialogBoxParamA
CharToOemA
DispatchMessageW
IsCharAlphaA
wsprintfW
CreateDesktopW
DrawStateW
LoadBitmapW
GetPropA
CharNextA
GetCaretPos
InsertMenuA
PostMessageA
PeekMessageA
LoadCursorA
GetMonitorInfoA

advapi32

RegSaveKeyW
ReadEventLogA
RegRestoreKeyA
RegCreateKeyExA
OpenEventLogA
IsTextUnicode
RegDeleteValueW
InitializeAcl
RegLoadKeyA
CryptSignHashA

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aed4415f47b34cb5ca4a58aa6ad85425

Headers

File Characteristics

Imports

resutils

kernel32

mprapi

user32

advapi32

Sections

.text Size: 248KB - Virtual size: 247KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 248KB - Virtual size: 247KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 5KB - Virtual size: 5KB