486b30725e0b4cdf251278e2094ddaffc4e099d248e2fe4cf514576eb75c2f6d

General

Target

486b30725e0b4cdf251278e2094ddaffc4e099d248e2fe4cf514576eb75c2f6d
Size

64KB
MD5

37ce343aee8a3eba7883a89d5c1309ed
SHA1

de285a394f4aa7c9f89a1b2a9f3d4349a94560f7
SHA256

486b30725e0b4cdf251278e2094ddaffc4e099d248e2fe4cf514576eb75c2f6d
SHA512

2e3d30c35153db02e430cbdd4de074a17d3a0319960944ba42fae977eb8c7970f64a41143ab6e72b6c33fad81a558f925f226a299ee65fad843ddb85e908a673
SSDEEP

768:9zUw4dOsvRzZ/0wRI7FnIsonXuWQObZ1Hhvtpal7CwW8YF094L4AeDeoGnPChcl0:H4bvDI7Fn1oXtQOvRtpawV09S41F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
486b30725e0b4cdf251278e2094ddaffc4e099d248e2fe4cf514576eb75c2f6d

Files

486b30725e0b4cdf251278e2094ddaffc4e099d248e2fe4cf514576eb75c2f6d
.exe windows x86

78a07f90728e90bc04d97383bf6f12d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerBuffW
CharUpperBuffW
MessageBoxA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78a07f90728e90bc04d97383bf6f12d8

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 32KB - Virtual size: 32KB

.data Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 4B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 32KB - Virtual size: 32KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 4B

.idata
Size: 2KB - Virtual size: 1KB