efb814e89a89de287763eae46fc1e32cebddad47c574cedb9e48fcad153afdc3

General

Target

efb814e89a89de287763eae46fc1e32cebddad47c574cedb9e48fcad153afdc3
Size

19KB
MD5

055f8aa723c4859c04058a2ad52e80ef
SHA1

820a23487b39ed55df5d42b198ffec6764f7cd7e
SHA256

efb814e89a89de287763eae46fc1e32cebddad47c574cedb9e48fcad153afdc3
SHA512

8210aee63147b05a0fa63109081779abc311c212ac72a982a7fc5c9ce0c210a4394a48454c1119cb8d9967f8344b7d3df2e724e92f7c3d331fd99a8775972808
SSDEEP

384:s+KVdExqv+zKQUwfNaPPVoyz5lEh8o924YYRYimllh/1jn7Z0g:sVVd7v+zKdcN7ydlEh8oszYm5lF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efb814e89a89de287763eae46fc1e32cebddad47c574cedb9e48fcad153afdc3

Files

efb814e89a89de287763eae46fc1e32cebddad47c574cedb9e48fcad153afdc3
.exe windows x86

0f2a450a9727d35e070f8afb35da28bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowRect
GetSystemMetrics
MessageBoxA
SetWindowPos
GetDC
wsprintfA

kernel32

CreateFileMappingA
CreatePipe
CreateProcessA
ExitProcess
GetCommandLineA
GetConsoleMode
GetFileAttributesA
GetFileSize
GetLastError
GetProcessHeap
GetStdHandle
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
CreateFileA
HeapDestroy
HeapFree
MapViewOfFile
MultiByteToWideChar
ReadConsoleA
ReadFile
RtlZeroMemory
SetConsoleMode
SetFilePointer
TerminateProcess
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpiA
lstrlenA
CloseHandle
HeapCreate

advapi32

CryptCreateHash
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptGetHashParam
CryptAcquireContextA

ntdll

RtlComputeCrc32

gdi32

GetDeviceCaps

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f2a450a9727d35e070f8afb35da28bc

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

ntdll

gdi32

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 512B - Virtual size: 384B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 512B - Virtual size: 384B