970fe3f97ffd96ecf7df4531f3988cc2ede2f5ab7d7dcb083944980040efc3c6

General

Target

970fe3f97ffd96ecf7df4531f3988cc2ede2f5ab7d7dcb083944980040efc3c6
Size

131KB
MD5

09ad6069d07c3605130927d5ca5c797e
SHA1

b76649e03a8bb573f1ae96918748722d2a970394
SHA256

970fe3f97ffd96ecf7df4531f3988cc2ede2f5ab7d7dcb083944980040efc3c6
SHA512

c460c9c7e7938c939dc7d425790b8413f70e6aa6b6c52541d73b9d367e0d63b2c2d06beadc302e062a4ceb706c0caf61a8a8f38320173ea91ab688154e19dd8c
SSDEEP

768:bb/oxK2ceBSE6a1VJirXSzcB2mybAQBhCM90f8oYAHpMMCv3DZwHCDWMFl9LmxsX:bb/oxKZITLzW4wEoYAJkfDOM7wE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
970fe3f97ffd96ecf7df4531f3988cc2ede2f5ab7d7dcb083944980040efc3c6

Files

970fe3f97ffd96ecf7df4531f3988cc2ede2f5ab7d7dcb083944980040efc3c6
.exe windows x86

69fd81fae2d1a34b83d632a1459040ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
LoadLibraryA
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
ExitProcess

oleaut32

SysAllocStringLen
SysFreeString

user32

CharUpperBuffW
CharLowerBuffW
MessageBoxA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 512B - Virtual size: 402B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69fd81fae2d1a34b83d632a1459040ed

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 32KB - Virtual size: 31KB

.data Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 18KB

.idata Size: 2KB - Virtual size: 1KB

.stab Size: 1KB - Virtual size: 1KB

.stabstr Size: 512B - Virtual size: 402B

.text
Size: 32KB - Virtual size: 31KB

.data
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 18KB

.idata
Size: 2KB - Virtual size: 1KB

.stab
Size: 1KB - Virtual size: 1KB

.stabstr
Size: 512B - Virtual size: 402B