75d699c61acd8734d27ab38faadd9d9093bed37f7696e71ce42f2b31f60b5022

General

Target

75d699c61acd8734d27ab38faadd9d9093bed37f7696e71ce42f2b31f60b5022
Size

284KB
MD5

ba5c0ce8b57a6ee1263239d067e173b7
SHA1

00127f1902135f4520678570eec4d1fe9333317e
SHA256

75d699c61acd8734d27ab38faadd9d9093bed37f7696e71ce42f2b31f60b5022
SHA512

55789dd1c5f13c199740c1134b72f9d347345a7d12b89306073ac082c8afb6bb39d16d1038d841de75f62c58a788920aef24252738c480e77c56f77707af9332
SSDEEP

6144:1OyvNI4+u0DSvMYp8K9xa7vQS9aYMed3mzeUbEZGs:Ti63p82xwvQSopzjRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75d699c61acd8734d27ab38faadd9d9093bed37f7696e71ce42f2b31f60b5022

Files

75d699c61acd8734d27ab38faadd9d9093bed37f7696e71ce42f2b31f60b5022
.exe windows x86

731db81a06c329c3cf0f6599c64ae1a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
FreeLibrary
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetProcAddress
Sleep
LoadLibraryW
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
GetTickCount

user32

MessageBoxW

msvcr80

_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_exit
_cexit
__wgetmainargs
??2@YAPAXI@Z
??3@YAXPAX@Z
printf
_purecall
_amsg_exit
__CxxFrameHandler3

msvcp80

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

vmprotectsdk32

VMProtectBegin
VMProtectEnd

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

731db81a06c329c3cf0f6599c64ae1a1

Headers

File Characteristics

Imports

kernel32

user32

msvcr80

msvcp80

vmprotectsdk32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 268KB - Virtual size: 264KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 268KB - Virtual size: 264KB