1273e22ad54f212f83f5daf35fa666eca29beb703dea03d2d6d955e6568d1b86

General

Target

1273e22ad54f212f83f5daf35fa666eca29beb703dea03d2d6d955e6568d1b86
Size

168KB
MD5

cbcbbca5bc8e6b45996c1b12dd3cf20a
SHA1

707edf86c73688d7bd3c6ea05e09b44c189554e0
SHA256

1273e22ad54f212f83f5daf35fa666eca29beb703dea03d2d6d955e6568d1b86
SHA512

5bc2fe2e6d6eb4bd9eb8e148d63ba0ab53ce94727e0e57f36e330d75c0ccaedea6c52fb470ce86fef3c47eee3041baba963a13fafd1a4c6c489c2faf7f58cd24
SSDEEP

3072:kja19RgNsTGME0lH/6RhXg/aqz/IdjxTxyW1XXok/HXEWuX1yD51jm:0NuGEVinXg/aGIdjH/3zuam

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1273e22ad54f212f83f5daf35fa666eca29beb703dea03d2d6d955e6568d1b86

Files

1273e22ad54f212f83f5daf35fa666eca29beb703dea03d2d6d955e6568d1b86
.exe windows x86

f5bd0d3aa21460cb7bc3bca864932e96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendStringA
PlaySoundA
timeGetTime

kernel32

GetLastError
LoadLibraryA
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetProcAddress
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
SetConsoleCtrlHandler
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
CloseHandle
GetFileType

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5bd0d3aa21460cb7bc3bca864932e96

Headers

File Characteristics

Imports

winmm

kernel32

user32

advapi32

Sections

.text Size: 84KB - Virtual size: 82KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 24KB - Virtual size: 348KB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 84KB - Virtual size: 82KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 24KB - Virtual size: 348KB

.rsrc
Size: 48KB - Virtual size: 46KB