9a9a3bdd95bc95e77176af3155be284c24af6b990063e7b939c97d0ad4cbea5f

General

Target

9a9a3bdd95bc95e77176af3155be284c24af6b990063e7b939c97d0ad4cbea5f
Size

112KB
MD5

faa114d7615b153c0423971682794c4b
SHA1

1b38dcf52c2ea37526e9a745a9a02e2086c62c43
SHA256

9a9a3bdd95bc95e77176af3155be284c24af6b990063e7b939c97d0ad4cbea5f
SHA512

c2d7788a172065be5a8f6ec00908643fd46e78175a95f918f18a1391c952637fc1e0a58f9a3b955754b3db7d395d2cd487d53e0826607f04eef47b595dd4586b
SSDEEP

1536:BQY8s7WW4vEXjD5l25X6/V5AnPCkGmX/IvKdcHDubWP298oDk+UI6fwF:77Wej2QAqkXX/IS+hP08oDL6oF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a9a3bdd95bc95e77176af3155be284c24af6b990063e7b939c97d0ad4cbea5f

Files

9a9a3bdd95bc95e77176af3155be284c24af6b990063e7b939c97d0ad4cbea5f
.dll windows x86

9aaa7f5b67e369f3419d7dc3c98eb615

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetLastError
CloseHandle
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetProcAddress
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
RaiseException
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9aaa7f5b67e369f3419d7dc3c98eb615

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 32KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 880B

.data Size: 8KB - Virtual size: 5KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 32KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 880B

.data
Size: 8KB - Virtual size: 5KB