f25b6c7b1c3708b1fe45b19c23415bae96689261769eeaf4c7ac5234e74499f2

General

Target

f25b6c7b1c3708b1fe45b19c23415bae96689261769eeaf4c7ac5234e74499f2
Size

15KB
MD5

6281780a158a73064a1c3f6839d11e31
SHA1

cb8d3a64fee189af4e3e2c67091c7ff26ea46894
SHA256

f25b6c7b1c3708b1fe45b19c23415bae96689261769eeaf4c7ac5234e74499f2
SHA512

d8ddb108fe925ad8bfe9d117101c3f2ed1cfece7296de518c375044e3b65c831d952bfef3757d0ca119b54f1667d45874068ad2d0c6bc5570395102b205ced13
SSDEEP

384:GYSsZ7haFUoJwDTUxqYDlh+z34wtLiLvKc:QsZlaFUoqDTUIwmIwSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f25b6c7b1c3708b1fe45b19c23415bae96689261769eeaf4c7ac5234e74499f2

Files

f25b6c7b1c3708b1fe45b19c23415bae96689261769eeaf4c7ac5234e74499f2
.exe windows:6 windows x86

c812fb769b7e4efab4a16afd41814a2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleExW
FreeLibrary
ExitProcess
Sleep
GetProcAddress
VirtualQuery
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

msvcrt

_XcptFilter
__set_app_type
__getmainargs
_environ
?_set_new_mode@@YAHH@Z
_msize
?terminate@@YAXXZ
realloc
_errno
free
_controlfp_s
__p__commode
__p___argv
__p___argc
_set_fmode
_initterm_e
_initterm
_amsg_exit
_except_handler4_common
memset
__CxxFrameHandler3

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c812fb769b7e4efab4a16afd41814a2c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 652B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 652B