aa8be33505effb4cda5f2600bc7e63e5d2743a25e1010bbde7f01f36225eca3e

General

Target

aa8be33505effb4cda5f2600bc7e63e5d2743a25e1010bbde7f01f36225eca3e
Size

1.3MB
MD5

97002e4c9b5f11388c84afbb2d5775e1
SHA1

ae1d6fb89f682a008198a34828967a090ae3b695
SHA256

aa8be33505effb4cda5f2600bc7e63e5d2743a25e1010bbde7f01f36225eca3e
SHA512

363f328415f26ae16fd89406e5ee9f79083e7bb38e54c0d6cab6711884d107a148327dd3a155d56c837a09e61f1894b456156b264459563cb87fe551ab83f1ef
SSDEEP

24576:XeVzJ6Tm26V9wwCdsKZCyqEAn78g9saOBNJsLSA:XepEg9xtKkjEA7UBNJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8be33505effb4cda5f2600bc7e63e5d2743a25e1010bbde7f01f36225eca3e

Files

aa8be33505effb4cda5f2600bc7e63e5d2743a25e1010bbde7f01f36225eca3e
.exe windows:4 windows x86

aefd2ba79f4a30d123544d14415dd5f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
GetModuleHandleExA
lstrcpynA
RtlMoveMemory
GetCurrentProcess
ReadProcessMemory
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
ReadFile
GetFileSize
GetLocalTime
FreeLibrary
LoadLibraryA
LCMapStringA

msvcrt

atoi
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_atoi64
atof
sprintf
free
malloc
strchr
realloc
modf
memmove
strncmp
__CxxFrameHandler

user32

GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
SetWindowPos
ScreenToClient
GetWindowRect
SetWindowLongA
ShowWindow
GetDlgItem
wsprintfA
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
SendMessageA
GetMessageA
UpdateWindow
CreateDialogIndirectParamA
SetWindowTextA
MessageBoxA

shlwapi

PathFileExistsA

Sections

.text
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xeng
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

aefd2ba79f4a30d123544d14415dd5f4

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

shlwapi

Sections

.text Size: 676KB - Virtual size: 675KB

.rdata Size: 148KB - Virtual size: 146KB

.data Size: 96KB - Virtual size: 297KB

.rsrc Size: 24KB - Virtual size: 23KB

xeng Size: 352KB - Virtual size: 352KB

.text
Size: 676KB - Virtual size: 675KB

.rdata
Size: 148KB - Virtual size: 146KB

.data
Size: 96KB - Virtual size: 297KB

.rsrc
Size: 24KB - Virtual size: 23KB

xeng
Size: 352KB - Virtual size: 352KB