f93ff5ae7f7ba6b1a521a13f17cd4c23de7e4c751f7af155058acf697b6c6f94

Sharing

Copy URL Twitter E-mail

General

Target

f93ff5ae7f7ba6b1a521a13f17cd4c23de7e4c751f7af155058acf697b6c6f94
Size

58KB
MD5

8fd2043fe71777c169077708ee8618b9
SHA1

15dc755de216a8b5f9e177cff17fda2372c3e826
SHA256

f93ff5ae7f7ba6b1a521a13f17cd4c23de7e4c751f7af155058acf697b6c6f94
SHA512

55ac7e0bfcc04895ed8ead6568de3bd17139cb61c263eb59e4c8b0265816867b349c1017f1cd16aa21c5f65acce9dd4046837806c1190e7123bd016a8be27fe1
SSDEEP

768:ujezxHHNAcg9+ZLO6iWKzk6qSySn+7kw8Fb7qlL:uqdNAcQILO6iWKQ6sS+7kwubWl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f93ff5ae7f7ba6b1a521a13f17cd4c23de7e4c751f7af155058acf697b6c6f94

Files

f93ff5ae7f7ba6b1a521a13f17cd4c23de7e4c751f7af155058acf697b6c6f94
.exe windows x86

ad46c4a64047634ba0fe0ffa1667da41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
lstrcatW
lstrlenW

msvcrt

__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_wcmdln
abort
calloc
exit
fprintf
free
fwrite
malloc
memmove
signal
strncmp
vfprintf

user32

LoadStringW
MessageBoxW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1012B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rossym
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad46c4a64047634ba0fe0ffa1667da41

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 1024B - Virtual size: 676B

/4 Size: 512B - Virtual size: 20B

.bss Size: - Virtual size: 1012B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 29KB - Virtual size: 28KB

.rossym Size: 17KB - Virtual size: 16KB

.text
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 1024B - Virtual size: 676B

/4
Size: 512B - Virtual size: 20B

.bss
Size: - Virtual size: 1012B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 29KB - Virtual size: 28KB

.rossym
Size: 17KB - Virtual size: 16KB