e8064b2e3c6d90226df34d7959a2d0d06f2b749b93a11c9844a816f2516e85eb

General

Target

e8064b2e3c6d90226df34d7959a2d0d06f2b749b93a11c9844a816f2516e85eb
Size

10KB
MD5

c3d1eb51dd97a80e7ed43de6c89a84ee
SHA1

487b1282d7984123adc25e1a657152aedf7e9922
SHA256

e8064b2e3c6d90226df34d7959a2d0d06f2b749b93a11c9844a816f2516e85eb
SHA512

f822bc08722dc0f716d4a4aab03e6a929bf11bf01454ba992237095d81fc74dd18dd33b7fab270513f4500ba1fa150b7d9600da32daffb8c0b8b8ec930e2e020
SSDEEP

192:R/tj2jBCOSsVsqZntpfCUSAfUKGbEJpvD8Oo2G7NWa888ri:x61SstZtlgbsD6NWm8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8064b2e3c6d90226df34d7959a2d0d06f2b749b93a11c9844a816f2516e85eb

Files

e8064b2e3c6d90226df34d7959a2d0d06f2b749b93a11c9844a816f2516e85eb
.exe windows x86

419fad899e85c15c5b7e92ef8d015f63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess

vcruntime140d

__current_exception
__current_exception_context
memset
_except_handler4_common

ucrtbased

__acrt_iob_func
__stdio_common_vfprintf
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

419fad899e85c15c5b7e92ef8d015f63

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140d

ucrtbased

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 376B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 376B